Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

Cybersecurity Vulnerability Intelligence: CVE, KEV, EPSS and PoC Tracking

A focused English hub for security teams tracking high-risk vulnerabilities, known exploited CVEs, exploitation probability, public exploit mappings, proof-of-concept availability, affected products and mitigation references.

Critical RCE vulnerabilitiesKnown exploited vulnerabilitiesHigh EPSS exploitation probabilityPublic exploit mappingsCVE proof-of-concept databaseAI-generated PoC analysisFeatured AI PoCsReproduced vulnerabilitiesRCE CVE tagIn-the-wild CVE tag

Vendor Vulnerability Hubs

Microsoft vulnerabilitiesCisco vulnerabilitiesFortinet vulnerabilitiesPalo Alto Networks vulnerabilitiesIvanti vulnerabilitiesVMware vulnerabilitiesApache Software Foundation vulnerabilitiesLinux vulnerabilitiesOracle Corporation vulnerabilitiesAdobe vulnerabilitiesApple vulnerabilitiesGoogle vulnerabilities

Recently Published Critical CVEs

12 CVEs
CVETitleCVSSVendorPublished
CVE-2026-56271Flowise - Weak Default JWT Secrets in Authentication Middleware - FlowiseCWE-3219.8Flowise2026-07-12
CVE-2026-56260Crawl4AI - Arbitrary File Write via output_path Parameter - Crawl4AICWE-229.1Crawl4AI2026-07-12
CVE-2026-61447PraisonAI before 1.6.78 Remote Code Execution via CodeAgent - PraisonAICWE-9410.0MervinPraison2026-07-11
CVE-2026-61445PraisonAI before 4.6.78 Arbitrary File Write and Command Execution - PraisonAICWE-229.9MervinPraison2026-07-11
CVE-2026-60090PraisonAI before 4.6.78 SQL/CQL Injection via vector dimension - PraisonAICWE-899.8MervinPraison2026-07-11
CVE-2026-14480OpenPLC v3 External Control of File Name or Path - OpenPLCCWE-739.9OpenPLC2026-07-10
CVE-2026-20744Hydro-Québec Le Circuit Electrique charging station backend Improper Access Control - Le Circuit Electrique charging station backendCWE-2849.8Hydro-Québec2026-07-10
CVE-2026-55879OpenReplay: Unauthenticated stored XSS leads to dashboard account takeover - openreplayCWE-799.3openreplay2026-07-10
CVE-2026-57807WordPress OAuth Single Sign On - SSO (OAuth Client) plugin <= 38.5.8 - Broken Authentication vulnerability - OAuth Single Sign On - SSO (OAuth Client)CWE-2889.8miniOrange Security Software Pvt Ltd.2026-07-10
CVE-2026-12761miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) <= 7.7.0 - Unauthenticated Authentication Bypass to Administrator Account Takeover via Profile Completion OTP Flow - miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn)CWE-2879.8cyberlord922026-07-10
CVE-2026-61459MCP Server Kubernetes < 3.9.0 Argument Injection via kubectl Structured Tools - mcp-server-kubernetesCWE-889.8Flux1592026-07-10
CVE-2026-5801SQLi in Semtek Informatics' SEM-PMP - SEM-PMPCWE-899.8Semtek Informatics Software Consulting Trade Ltd. Co.2026-07-10

Live Vulnerability Queues

CISA KEVKnown exploited vulnerabilities prioritized by date added.
High EPSS RiskCVEs with elevated exploitation probability.
Public ExploitsExploitDB, Metasploit and Nuclei mappings.
AI PoC AnalysisAI-generated proof-of-concept analysis and triage notes.

How to use this vulnerability intelligence hub

Start with KEV and EPSS when prioritizing emergency patching. Use public exploit mappings and PoC pages to understand exploit availability, then open the CVE detail page for CVSS vectors, affected versions, CWE classification, references, AI deep analysis and mitigation context.