PULSEUnderground Intel

LIVE24signals / 24h

FEED

ransomclop reclama a ZEBRA.COM · US · Manufacturingransomshinyhunters reclama a Metabase · US · Technologyransomshinyhunters reclama a Sharecare, Inc. · US · Healthcareransomthegentlemen reclama a IPS · IT · Not Foundransomshinyhunters reclama a Carhartt, Inc. · US · Retail & E-Commerceransomthegentlemen reclama a Gfeller Treuhand und Verwaltungs · CH · Professional Servicesransomshinyhunters reclama a Cook Medical LLC · US · Healthcareransomthegentlemen reclama a Gravity Coffee · US · Retail & E-Commerceransomshinyhunters reclama a Baxter International, Inc. · US · Healthcareransomthegentlemen reclama a Ollies Place Kidswear · AU · Retail & E-Commerceransomthegentlemen reclama a The Coffee Bean · MY · Retail & E-Commerceransomthegentlemen reclama a KFC Kosova · Hospitalityransomthegentlemen reclama a First Coast Heart Vascular Center · US · Healthcareransomthegentlemen reclama a Cityside Homes · GB · Not Foundransomclop reclama a ZEBRA.COM · US · Manufacturingransomshinyhunters reclama a Metabase · US · Technologyransomshinyhunters reclama a Sharecare, Inc. · US · Healthcareransomthegentlemen reclama a IPS · IT · Not Foundransomshinyhunters reclama a Carhartt, Inc. · US · Retail & E-Commerceransomthegentlemen reclama a Gfeller Treuhand und Verwaltungs · CH · Professional Servicesransomshinyhunters reclama a Cook Medical LLC · US · Healthcareransomthegentlemen reclama a Gravity Coffee · US · Retail & E-Commerceransomshinyhunters reclama a Baxter International, Inc. · US · Healthcareransomthegentlemen reclama a Ollies Place Kidswear · AU · Retail & E-Commerceransomthegentlemen reclama a The Coffee Bean · MY · Retail & E-Commerceransomthegentlemen reclama a KFC Kosova · Hospitalityransomthegentlemen reclama a First Coast Heart Vascular Center · US · Healthcareransomthegentlemen reclama a Cityside Homes · GB · Not Found

CVE Watch359,665 in full archive

Vulnerabilities exploitable today

359,665in current view

Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.

In KEV catalog1,665

New KEV · 24H0

Exploit Today ≥ 701,608

Distribution · last window

Critical
2,517
High
11,189
Medium
7,120
Low
649

Filters

Window

Severity

Flags

Vulnerabilities319,161–319,200 · 359,665

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-99748.3 HIG

——3Out of bounds write in GPU in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)25d CVE-2024-36275—

——3——CVE-2026-32240—

——3——CVE-2025-21993—

——3——CVE-2024-12414—

——3——CVE-2025-44039—

——3——CVE-2025-9544—

——3——CVE-2026-8020—

——3——CVE-2025-7738—

——3——CVE-2025-12843—

——3——CVE-2025-30035—

——3——CVE-2026-704906.3 MED

——3Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.8.8 until 0.11.0, the terminal WebSocket route in backend/open_webui/routers/terminals.py authenticated its own first-message JWT and never applied the verified-user role gate that get_verified_user enforces on HTTP terminal routes. An account whose role is pending, including a registered but unapproved account or an account deactivated back to pending, can open an interactive terminal session when at least one terminal server is configured and its access grants cover the account. This loses the account-approval boundary for terminal access while the HTTP terminal routes correctly reject the same account. This issue is fixed in 0.11.0.9d CVE-2024-38805—

——3——CVE-2022-0016—

——3——CVE-2026-27615—

——3——CVE-2021-22545—

——3——CVE-2016-20028—

——3——CVE-2021-3032—

——3——CVE-2024-41308—

——3——CVE-2024-54504—

——3——CVE-2026-8523—

——3——CVE-2026-349616.2 MED

——3barebox prior to version 2026.04.0 contains out-of-bounds read vulnerabilities in ext4 extent parsing due to missing validation of the eh_entries field against buffer capacity in fs/ext4/ext4_common.c. Attackers can supply a malicious ext4 filesystem image via USB, SD card, or network boot to trigger heap out-of-bounds reads during boot-time filesystem parsing, potentially redirecting reads to arbitrary disk offsets.28d CVE-2018-11824—

——3——CVE-2024-56716—

——3——CVE-2017-17163—

——3——CVE-2019-2261—

——3——CVE-2022-21172—

——3——CVE-2022-28625—

——3——CVE-2026-42887—

——3——CVE-2022-3461—

——3——CVE-2017-17162—

——3——CVE-2017-17291—

——3——CVE-2015-9015—

——3——CVE-2017-17294—

——3——CVE-2017-17289—

——3——CVE-2026-42255—

——3——CVE-2021-1088—

——3——CVE-2024-47665—

——3——CVE-2025-59987—

——3——CVE-2026-4127—