PULSEUnderground Intel

LIVE18signals / 24h

FEED

ransomkrybit reclama a euroins.bg · BG · Financial Servicesransomnova reclama a FMZ Tecnologia em Sistemas · BR · Technologyransomqilin reclama a Heartland Catfish · US · Agriculture and Food Productionransomqilin reclama a Salina Supply · US · Business Servicesransomqilin reclama a St Martha Catholic Church · US · Consumer Servicesransomqilin reclama a The Nueva School · US · Educationransomdragonforce reclama a NewNet · SA · Telecommunicationransomqilin reclama a Sicc · IT · Not Foundransomqilin reclama a KLD Labs · US · Technologyransomqilin reclama a Armara · FR · Not Foundransomqilin reclama a AK Preparedness · Business Servicesransomthreeam reclama a tws-tac.net · DE · Not Foundransomincransom reclama a v-silicon.com · TW · Technologyransomincransom reclama a FAST.COM.PH · PH · Technologyransomkrybit reclama a euroins.bg · BG · Financial Servicesransomnova reclama a FMZ Tecnologia em Sistemas · BR · Technologyransomqilin reclama a Heartland Catfish · US · Agriculture and Food Productionransomqilin reclama a Salina Supply · US · Business Servicesransomqilin reclama a St Martha Catholic Church · US · Consumer Servicesransomqilin reclama a The Nueva School · US · Educationransomdragonforce reclama a NewNet · SA · Telecommunicationransomqilin reclama a Sicc · IT · Not Foundransomqilin reclama a KLD Labs · US · Technologyransomqilin reclama a Armara · FR · Not Foundransomqilin reclama a AK Preparedness · Business Servicesransomthreeam reclama a tws-tac.net · DE · Not Foundransomincransom reclama a v-silicon.com · TW · Technologyransomincransom reclama a FAST.COM.PH · PH · Technology

CVE Watch349,507 in full archive

Vulnerabilities exploitable today

349,507in current view

Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.

In KEV catalog1,647

New KEV · 24H0

Exploit Today ≥ 701,582

Distribution · last window

Critical
1,331
High
4,364
Medium
3,727
Low
291

Filters

Window

Severity

Flags

Vulnerabilities345,921–345,960 · 349,507

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-20064—

——0——CVE-2026-9987—

——0——CVE-2025-46696—

——0——CVE-2026-46157—

——0——CVE-2024-39819—

——0——CVE-2023-42728—

——0——CVE-2023-21241—

——0——CVE-2025-15037—

——0——CVE-2026-46256—

——0——CVE-2025-52540—

——0——CVE-2026-42479—

——0——CVE-2025-48578—

——0——CVE-2024-56193—

——0——CVE-2026-32043—

——0——CVE-2025-60791—

——0——CVE-2025-0044—

——0——CVE-2024-40593—

——0——CVE-2021-39747—

——0——CVE-2025-0280—

——0——CVE-2026-34854—

——0——CVE-2023-33883—

——0——CVE-2026-8863—

——0——CVE-2026-622365.4 MED

——0grav-plugin-login before 3.8.11 contains a cross-site request forgery (CSRF) vulnerability in the login.regenerate2FASecret frontend task, which regenerates and persists a new TOTP secret for the authenticated session user without any anti-CSRF nonce or Origin/Referer check. Because Grav core dispatches the task from the GET 'task:' URI parameter and the default session cookie is SameSite=Lax, an attacker can lure a logged-in victim to an off-site page that performs a top-level GET navigation, rotating the victim's TOTP secret so their enrolled authenticator no longer matches the server, effectively forcing 2FA re-enrollment. Sites configured with session.samesite: Strict are not affected.1d CVE-2024-0041—

——0——CVE-2023-33900—

——0——CVE-2022-23427—

——0——CVE-2026-41009—

——0——CVE-2026-5420—

——0——CVE-2022-21777—

——0——CVE-2025-20640—

——0——CVE-2026-4242—

——0——CVE-2025-68083—

——0——CVE-2024-42033—

——0——CVE-2025-54646—

——0——CVE-2025-53103—

——0——CVE-2025-68082—

——0——CVE-2026-45942—

——0——CVE-2022-21763—

——0——CVE-2022-32653—

——0——CVE-2021-0943—