Security Intelligence
Feed

Real-time CVE tracking, exploit analysis, and vulnerability intelligence curated for security professionals.

57 New today
64,196 Total advisories
Live Monitoring

Daily Security Trends (Last 14 Days)

32
Jun 7
255
Jun 8
658
Jun 9
351
Jun 10
245
Jun 11
336
Jun 12
60
Jun 13
68
Jun 14
443
Jun 15
630
Jun 16
464
Jun 17
3
Jun 18
352
Jun 19
35
Jun 20
Critical
High
Medium
Low

Recent Advisories

Severity ID Title Vendor Product Date Type
CRITICAL 9.9 44B81EDD-C298-

Exploit for Execution with Unnecessary Privileges in Percona Monitoring_And_Management_44B81EDD-C298-593E-9EA3-5225EF88AC36

CVE-2026-25212 POC for CVE-2026-25212...

N/A N/A GITHUBEXPLOIT
NONE MSF:EXPLOIT-MULTI-

Joplin Plugin Persistence_MSF:EXPLOIT-MULTI-PERSISTENCE-JOPLIN_PLUGIN-

This module installs a malicious Joplin plugin .jpl into the target's Joplin plugin directory. The plugin executes the payload each time Joplin is ...

N/A N/A METASPLOIT
NONE MSF:AUXILIARY-SERVER-

Quectel Cellular Modem Pivot (Serial AT)_MSF:AUXILIARY-SERVER-QUECTEL_MODEM-

Opens a serial connection to a Quectel cellular modem and registers it as a 'modem' session capable of network pivoting. The Quectel modems have a ...

N/A N/A METASPLOIT
CRITICAL 10 FF7344F1-411D-

Exploit for Deserialization of Untrusted Data in Facebook React_FF7344F1-411D-55F1-B276-7221215B98DB

CVE-2025-55182 — React2Shell Unauthenticated RCE in React Server Components Author: TYehan --- TL;DR A single unauthenticated HTTP request can exec...

N/A N/A GITHUBEXPLOIT
CRITICAL 9.2 B132E072-36D8-

Exploit for CVE-2026-42530_B132E072-36D8-5390-949D-A06FA9ADC7B5

CVE-2026-42530 Scanner for CVE-2026-42530, a use-after-free in nginx's HTTP/3 module. Affected: nginx 1.31.0, 1.31.1 Fixed: nginx 1.31.2 Usage pip ...

N/A N/A GITHUBEXPLOIT
MEDIUM 6.5 CVE-2026-49359

PhpWeasyPrint vulnerable to SSRF and local file disclosure via the attachment option_CVE-2026-49359

PhpWeasyPrint is a PHP library allowing PDF generation from a URL or an HTML page. Prior to version 2.6.0, `pontedilana/php-weasyprint` fetches the...

pontedilana php-weasyprint < 2.6.0 CVE
HIGH 7.6 CVE-2026-49290

Slopsmith has path traversal in archive extractors that allows arbitrary file write → potential RCE_CVE-2026-49290

Slopsmith is a self-contained web application for browsing, playing, and practicing Rocksmith 2014 Custom DLC (CDLC). Prior to 0.2.9-alpha.5, a pat...

byrongamatos slopsmith < 0.2.9-alpha.5 CVE
HIGH 7.4 CVE-2026-49287

Statamic CMS vulnerable to unsafe method invocation via collection sorting allows data destruction_CVE-2026-49287

Statamic is a Laravel and Git powered content management system (CMS). Prior to 5.73.23 and 6.20.0, the fix for CVE-2026-41175 was incomplete. It a...

statamic cms < 5.73.23 CVE
HIGH 8.1 CVE-2026-49286

PhpWeasyPrint vulnerable to PHAR deserialization via output filename (CVE-2023-28115 case-insensitive bypass)_CVE-2026-49286

PhpWeasyPrint is a PHP library allowing PDF generation from a URL or an HTML page. Prior to version 2.6.0, `pontedilana/php-weasyprint` guarded the...

pontedilana php-weasyprint < 2.6.0 CVE