PULSEUnderground Intel

EN VIVO15señales / 24h

FEED

ransomlockbit5 reclama a synergy.co.id · IDransomshiba reclama a Tema Hwt · DEransomqilin reclama a fzmb GmbH, Forschungszentrum für Medizintechnik und Biotechnologie · DE · Healthcareransomqilin reclama a Global Holding · Otherransomwhitearmor reclama a AmplifAI (GoDaddy instance) · US · Technologyransomdirewolf reclama a My Cloud Grocer · GB · Retail & E-Commerceransomhyflock reclama a hitech group · US · Technologyransomqilin reclama a Shibata Co., Ltd. · JP · Manufacturingransomqilin reclama a Meshbesher & Spence · US · Professional Servicesransomqilin reclama a BKV Vasúti Jármjavító Kft · HU · Transportationransomqilin reclama a Forum · AT · Professional Servicesransomqilin reclama a Select Community Management · US · Professional Servicesransomqilin reclama a CMD Naturkosmetik · DE · Retail & E-Commerceransomqilin reclama a qc-consult · DE · Professional Servicesransomlockbit5 reclama a synergy.co.id · IDransomshiba reclama a Tema Hwt · DEransomqilin reclama a fzmb GmbH, Forschungszentrum für Medizintechnik und Biotechnologie · DE · Healthcareransomqilin reclama a Global Holding · Otherransomwhitearmor reclama a AmplifAI (GoDaddy instance) · US · Technologyransomdirewolf reclama a My Cloud Grocer · GB · Retail & E-Commerceransomhyflock reclama a hitech group · US · Technologyransomqilin reclama a Shibata Co., Ltd. · JP · Manufacturingransomqilin reclama a Meshbesher & Spence · US · Professional Servicesransomqilin reclama a BKV Vasúti Jármjavító Kft · HU · Transportationransomqilin reclama a Forum · AT · Professional Servicesransomqilin reclama a Select Community Management · US · Professional Servicesransomqilin reclama a CMD Naturkosmetik · DE · Retail & E-Commerceransomqilin reclama a qc-consult · DE · Professional Services

CVE Watch406,313 en archivo total

Vulnerabilidades explotables hoy

406,313en la vista actual

Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.

En catálogo KEV1,766

Nuevos KEV · 24H0

Exploit Today ≥ 701,698

Distribución · última ventana

Crítico
5,562
Alto
21,577
Medio
20,086
Bajo
2,090

Filtros

Filtros

Ventana

Severidad

Filtros

Vulnerabilidades12,521–12,560 · 406,313

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2014-2784—

——29——CVE-2018-15956—

——29——CVE-2015-0023—

——29——CVE-2025-4094—

——29——CVE-2003-0128—

——29——CVE-2012-1892—

——29——CVE-2014-4055—

——29——CVE-2017-0006—

——29——CVE-2003-0020—

——29——CVE-2018-1333—

——29——CVE-2014-2825—

——29——CVE-2017-14081—

——29——CVE-2018-0494—

——29——CVE-2022-435517.5 ALT

——29A vulnerability exists in curl <7.87.0 HSTS check that could be bypassed to trick it to keep using HTTP. Using its HSTS support, curl can be instructed to use HTTPS instead of using an insecure clear-text HTTP step even when HTTP is provided in the URL. However, the HSTS mechanism could be bypassed if the host name in the given URL first uses IDN characters that get replaced to ASCII counterparts as part of the IDN conversion. Like using the character UTF-8 U+3002 (IDEOGRAPHIC FULL STOP) instead of the common ASCII full stop (U+002E) `.`. Then in a subsequent request, it does not detect the HSTS state and makes a clear text transfer. Because it would store the info IDN encoded but look for it IDN decoded.18d CVE-2025-147059.8 CRÍ

——29A vulnerability was determined in Shiguangwu sgwbox N3 2.0.25. This affects an unknown function of the component SHARESERVER Feature. This manipulation of the argument params causes command injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.25d CVE-2015-1815—

——29——CVE-2024-44625—

——29——CVE-2014-2811—

——29——CVE-2020-0734—

——29——CVE-2009-4210—

——29——CVE-2019-3778—

——29——CVE-2015-6158—

——29——CVE-2015-1651—

——29——CVE-1999-0444—

——29——CVE-2022-26498—

——29——CVE-2018-0825—

——29——CVE-2014-2821—

——29——CVE-2012-0144—

——29——CVE-2015-6153—

——29——CVE-2013-6189—

——29——CVE-2015-6154—

——29——CVE-2017-0019—

——29——CVE-2015-2503—

——29——CVE-2020-9376—

——29——CVE-2011-0265—

——29——CVE-2018-13784—

——29——CVE-2008-4764—

——29——CVE-2014-4132—

——29——CVE-2026-94406.3 MED

——29A vulnerability was identified in Edimax BR-6478AC 1.23. Affected by this vulnerability is the function formAccept of the file /goform/formAccept of the component POST Request Handler. Such manipulation of the argument submit-url leads to command injection. It is possible to launch the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.102d CVE-2014-2808—