Published file metadata, source observations, indicators, and research history in one bounded catalog.
Sources represented on this page. Publication and observation dates describe the content; successful batch dates describe local collection. A recent batch does not certify complete coverage or current provider availability.
2 sources: 0 stale, 0 needing attention, 0 paused, 2 unverified.
Stale means older than twice the recorded collection interval, with a minimum of one hour; without an interval, the threshold is 24 hours. Cached content remains available while a feed is stale, paused, or unverified.
Using IBM's 2025 Cost of a Data Breach data, VulnCheck's 28-day speed advantage translates to $518,000 in risk avoided per incident.
First reported Feb 11, 2026 00:00 UTCCatalog metadata updated Oct 08, 2026 03:54 UTCOpen evidence recordA new Oracle E-Business Suite zero-day vulnerability is being linked to a Cl0p extortion campaign that exfiltrated EBS data from Oracle customer environments
First reported Oct 06, 2025 00:00 UTCCatalog metadata updated Oct 08, 2026 03:54 UTCOpen evidence recordVulnCheck Canaries captured live exploitation of XWiki CVE-2025-24893, a vulnerability absent from CISA KEV but actively abused in the wild.
First reported Oct 28, 2025 00:00 UTCCatalog metadata updated Oct 08, 2026 03:54 UTCOpen evidence recordExploit Intel 101 - Understanding Software Dependency Graphs
First reported May 21, 2025 00:00 UTCCatalog metadata updated Oct 08, 2026 03:54 UTCOpen evidence recordENISA's Cyber Resilience Act Single Reporting Platform(SRP) went live September 11, 2026 so we took a look at the new reporting platform.
First reported Sep 14, 2026 00:00 UTCCatalog metadata updated Oct 08, 2026 03:54 UTCOpen evidence recordIn response to NIST NVD's announcement that it will significantly limit CVE enrichment starting April 15, 2026, VulnCheck reaffirms its commitment to filling the data gap through its free NVD++ community service and plans to expand coverage with CVSS scores over the next month
First reported Apr 16, 2026 15:00 UTCCatalog metadata updated Oct 08, 2026 03:54 UTCOpen evidence recordA Look into the Last 6-months of Vulnerability Exploitation… January-June 2025
First reported Jul 30, 2025 00:00 UTCCatalog metadata updated Oct 08, 2026 03:54 UTCOpen evidence recordIn Q1 2025, VulnCheck identified evidence of 159 CVEs publicly disclosed for the first time as exploited in the wild.
First reported Apr 24, 2025 00:00 UTCCatalog metadata updated Oct 08, 2026 03:54 UTCOpen evidence recordVulnCheck integrates with OpenCTI - an open-source Threat Intelligence Platform by Filigran
First reported Mar 13, 2025 00:00 UTCCatalog metadata updated Oct 08, 2026 03:54 UTCOpen evidence recordExploit Intel 101 - Attacker Infrastructure
First reported Apr 18, 2025 00:00 UTCCatalog metadata updated Oct 08, 2026 03:54 UTCOpen evidence recordFiligran and VulnCheck are proud to announce a strategic partnership that transforms enterprise threat intelligence capabilities through seamless integration. This collaboration brings together Filigran's market-leading OpenCTI platform with VulnCheck's comprehensive exploit intelligence solutions, creating a powerful joint offering that delivers immediate business value to security teams to enabl
First reported Mar 27, 2025 00:00 UTCCatalog metadata updated Oct 08, 2026 03:54 UTCOpen evidence recordVulnCheck's Initial Access Intelligence team details an unauthenticated remote code execution in NVIDIA's GEN3C, where two FastAPI inference endpoints deserialize raw HTTP request bodies with pickle.loads() with no authentication.
First reported Jun 25, 2026 00:00 UTCCatalog metadata updated Oct 08, 2026 03:54 UTCOpen evidence recordRecapping our 2025 BlackHat and Defcon experience.
First reported Aug 12, 2025 00:00 UTCCatalog metadata updated Oct 08, 2026 03:54 UTCOpen evidence recordA silently patched vulnerability (CVE-2025-64446) in Fortinet FortiWeb is being exploited in the wild to add administrative users and compromise target devices
First reported Nov 14, 2025 00:00 UTCCatalog metadata updated Oct 08, 2026 03:54 UTCOpen evidence recordVulnCheck's Initial Access Intelligence team details an unauthenticated PHP object injection in the Aimy Captcha-Less Form Guard plugin for Joomla, where a repeating-key XOR published alongside its own ciphertext turns every protected form into an unserialize() sink and, on Joomla 3.9 through 5.2.1, into remote code execution.
First reported Jul 30, 2026 00:00 UTCCatalog metadata updated Oct 08, 2026 03:54 UTCOpen evidence recordPublic CVE disclosure volumes are surging across major software suppliers and open source projects, and the evidence increasingly points to AI-assisted vulnerability discovery as the driving force.
First reported May 14, 2026 00:00 UTCCatalog metadata updated Oct 08, 2026 03:54 UTCOpen evidence recordTriofox CVE-2025-12480 exploitation from beginning to end, all sharp edges included.
First reported Dec 18, 2025 00:00 UTCCatalog metadata updated Oct 08, 2026 03:54 UTCOpen evidence recordA primary source breakdown of every CVE publicly credited to Anthropic researchers and Project Glasswing, based on a full search of the CVE record database.
First reported Apr 15, 2026 15:00 UTCCatalog metadata updated Oct 08, 2026 03:54 UTCOpen evidence recordA few thoughts about how AI agents are fundamentally changing SIEM and adjacent markets, and what this means for the future
First reported Apr 14, 2026 17:40 UTCCatalog metadata updated Oct 08, 2026 03:54 UTCOpen evidence recordBasically, what the title says.
First reported May 19, 2026 17:04 UTCCatalog metadata updated Oct 08, 2026 03:54 UTCOpen evidence recordA guest post from Alex Chantavy about participating in Y Combinator as a security company.
First reported Jun 18, 2026 14:40 UTCCatalog metadata updated Oct 08, 2026 03:54 UTCOpen evidence recordAnd they have never been on a podcast
First reported Jun 23, 2026 15:20 UTCCatalog metadata updated Oct 08, 2026 03:54 UTCOpen evidence recordThe way security products are bought has changed, but many people missed it
First reported Apr 21, 2026 15:50 UTCCatalog metadata updated Oct 08, 2026 03:54 UTCOpen evidence recordThere are always exceptions but most security teams should generally speaking not build anything else except this one kind of product
First reported Mar 10, 2026 14:33 UTCCatalog metadata updated Oct 08, 2026 03:54 UTCOpen evidence recordThe public shared-host view reaches the newest 2,400 matching records. Narrow the filters or search an exact MD5, SHA-1, or SHA-256 value to reach a specific record.
A filename, label, or report mention alone does not establish maliciousness. Observation dates describe cited sources; collection dates describe this local metadata catalog. No malware samples are stored, fetched, or executed by these pages.