PULSEUnderground Intel

LIVE24signals / 24h

FEED

ransomclop reclama a ZEBRA.COM · US · Manufacturingransomshinyhunters reclama a Metabase · US · Technologyransomshinyhunters reclama a Sharecare, Inc. · US · Healthcareransomthegentlemen reclama a IPS · IT · Not Foundransomshinyhunters reclama a Carhartt, Inc. · US · Retail & E-Commerceransomthegentlemen reclama a Gfeller Treuhand und Verwaltungs · CH · Professional Servicesransomshinyhunters reclama a Cook Medical LLC · US · Healthcareransomthegentlemen reclama a Gravity Coffee · US · Retail & E-Commerceransomshinyhunters reclama a Baxter International, Inc. · US · Healthcareransomthegentlemen reclama a Ollies Place Kidswear · AU · Retail & E-Commerceransomthegentlemen reclama a The Coffee Bean · MY · Retail & E-Commerceransomthegentlemen reclama a KFC Kosova · Hospitalityransomthegentlemen reclama a First Coast Heart Vascular Center · US · Healthcareransomthegentlemen reclama a Cityside Homes · GB · Not Foundransomclop reclama a ZEBRA.COM · US · Manufacturingransomshinyhunters reclama a Metabase · US · Technologyransomshinyhunters reclama a Sharecare, Inc. · US · Healthcareransomthegentlemen reclama a IPS · IT · Not Foundransomshinyhunters reclama a Carhartt, Inc. · US · Retail & E-Commerceransomthegentlemen reclama a Gfeller Treuhand und Verwaltungs · CH · Professional Servicesransomshinyhunters reclama a Cook Medical LLC · US · Healthcareransomthegentlemen reclama a Gravity Coffee · US · Retail & E-Commerceransomshinyhunters reclama a Baxter International, Inc. · US · Healthcareransomthegentlemen reclama a Ollies Place Kidswear · AU · Retail & E-Commerceransomthegentlemen reclama a The Coffee Bean · MY · Retail & E-Commerceransomthegentlemen reclama a KFC Kosova · Hospitalityransomthegentlemen reclama a First Coast Heart Vascular Center · US · Healthcareransomthegentlemen reclama a Cityside Homes · GB · Not Found

CVE Watch359,665 in full archive

Vulnerabilities exploitable today

359,665in current view

Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.

In KEV catalog1,665

New KEV · 24H0

Exploit Today ≥ 701,608

Distribution · last window

Critical
2,517
High
11,189
Medium
7,120
Low
649

Filters

Window

Severity

Flags

Vulnerabilities319,241–319,280 · 359,665

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2025-40694—

——3——CVE-2025-59986—

——3——CVE-2026-44352—

——3——CVE-2024-36509—

——3——CVE-2024-47753—

——3——CVE-2025-59998—

——3——CVE-2020-10066—

——3——CVE-2022-50005—

——3——CVE-2025-59992—

——3——CVE-2026-1337—

——3——CVE-2025-60001—

——3——CVE-2021-47790—

——3——CVE-2025-60009—

——3——CVE-2016-2059—

——3——CVE-2025-15145—

——3——CVE-2026-47382—

——3——CVE-2026-42744—

——3——CVE-2021-34400—

——3——CVE-2019-25314—

——3——CVE-2026-8990—

——3——CVE-2026-32736—

——3——CVE-2025-59994—

——3——CVE-2025-43241—

——3——CVE-2026-582115.4 MED

——3NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.14.3 and 2.12.12, a client could be registered as the configured no_auth_user through a parser path used when the first client operation was not CONNECT, bypassing user-level connection restrictions such as allowed_connection_types or proxy_required that normal authentication would apply. This issue is fixed in versions 2.14.3 and 2.12.12.36d CVE-2025-55203—

——3——CVE-2026-45042—

——3——CVE-2026-18028—

——3The "quick setup" view presented to users after they first create an event allows to set up the most critical parts of an event in just a few clicks. This view did not properly check that the user has permission to change configuration for the given event. An attacker could use a well-timed request to create products, quotas, set bank transfer configuration, or connect a stripe account to an event they do not have access to.15d CVE-2026-40867—

——3——CVE-2018-9867—

——3——CVE-2022-48706—

——3——CVE-2026-42950—

——3——CVE-2025-61702.5 LOW

——3A flaw was found in the interactive shell of the xmllint command-line tool, used for parsing XML files. When a user inputs an overly long command, the program does not check the input size properly, which can cause it to crash. This issue might allow attackers to run harmful code in rare configurations without modern protections.4d CVE-2023-38612—

——3——CVE-2025-59988—

——3——CVE-2026-23625—

——3——CVE-2025-20022—

——3——CVE-2025-43818—

——3——CVE-2026-15227—

——3Missing authorization in Checkmk <2.5.0p10, <2.4.0p35, <2.3.0p49, and 2.2.0 (EOL) allows an authenticated user lacking the "Edit foreign Reports" permission to modify reports owned by other users.14d CVE-2024-46784—

——3——CVE-2026-4295—