Published file metadata, source observations, indicators, and research history in one bounded catalog.
Sources represented on this page. Publication and observation dates describe the content; successful batch dates describe local collection. A recent batch does not certify complete coverage or current provider availability.
1 sources: 0 stale, 0 needing attention, 0 paused, 0 unverified.
Stale means older than twice the recorded collection interval, with a minimum of one hour; without an interval, the threshold is 24 hours. Cached content remains available while a feed is stale, paused, or unverified.
Public exploits and detections for CVE-2023-27350 focus on code execution using the PaperCut print scripting interface. In this blog, VulnCheck shares a new code execution vector and demonstrates how existing detections aren't robust enough to flag the new activity.
First reported May 04, 2023 00:00 UTCCatalog metadata updated Oct 16, 2026 19:07 UTCOpen evidence recordIn October 2024, VulnCheck developed new Initial Access Intelligence (IAI) artifacts for 21 CVEs, covering 16 different vendors and products.
First reported Nov 12, 2024 00:00 UTCCatalog metadata updated Oct 16, 2026 19:07 UTCOpen evidence recordHow VulnCheck Target Intelligence makes NSA router-hygiene guidance actionable
First reported Jul 14, 2026 00:00 UTCCatalog metadata updated Oct 16, 2026 19:07 UTCOpen evidence recordTo help close the enrichment gap for CVEs in the “Awaiting Analysis" status, VulnCheck generates CPEs from reliable sources and has made them available through our NVD++ service as “vcConfigurations”.
First reported Apr 15, 2024 00:00 UTCCatalog metadata updated Oct 16, 2026 19:07 UTCOpen evidence recordInsights on recent emerging threats, initial access vulnerabilities, and published CVEs from VulnCheck’s research teams
First reported Oct 09, 2025 00:00 UTCCatalog metadata updated Oct 16, 2026 19:07 UTCOpen evidence recordThree new Citrix NetScaler vulnerabilities were disclosed on August 26, including CVE-2025-7775, a fresh zero-day flaw being used in the wild
First reported Aug 26, 2025 00:00 UTCCatalog metadata updated Oct 16, 2026 19:07 UTCOpen evidence recordLog4Shell was proclaimed one of the most critical vulnerabilities, but in this blog, VulnCheck challenges that perspective, revealing the limited number of vulnerable systems still present two years after the initial disclosure.
First reported Dec 18, 2023 00:00 UTCCatalog metadata updated Oct 16, 2026 19:07 UTCOpen evidence recordExploit Intel 101 - Understanding Exploits
First reported Dec 04, 2024 00:00 UTCCatalog metadata updated Oct 16, 2026 19:07 UTCOpen evidence recordVulnCheck delivers intelligence to Your Python and Go Applications with our new SDKs
First reported Oct 24, 2024 00:00 UTCCatalog metadata updated Oct 16, 2026 19:07 UTCOpen evidence recordExploit Intel 101 - Understanding Exploit Maturity
First reported May 21, 2025 00:00 UTCCatalog metadata updated Oct 16, 2026 19:07 UTCOpen evidence recordDuring June, July, and August, we captured exploitation evidence for 158 vulnerabilities, with initial evidence emerging within this period for the first time. The evidence was collected from over 35 different sources.
First reported Sep 12, 2024 00:00 UTCCatalog metadata updated Oct 16, 2026 19:07 UTCOpen evidence recordVulnCheck's new update enhances our CVE pages bringing actionable threat intelligence to the forefront.
First reported Jan 30, 2025 00:00 UTCCatalog metadata updated Oct 16, 2026 19:07 UTCOpen evidence recordVulnCheck delivers intelligence to the command line with VulnCheck’s new open source tool, VulnCheck CLI.
First reported Oct 22, 2024 00:00 UTCCatalog metadata updated Oct 16, 2026 19:07 UTCOpen evidence recordIn September, VulnCheck identified evidence of 78 CVEs that were publicly disclosed for the first time as exploited in the wild.
First reported Feb 03, 2025 00:00 UTCCatalog metadata updated Oct 16, 2026 19:07 UTCOpen evidence recordAttackers are abusing an unauthenticated command injection bug in ICTBroadcast (CVE-2025-2611) to execute remote commands and drop reverse shells. VulnCheck caught the exploitation, linked it to related research, and had detections available for customers well before the activity began.
First reported Oct 14, 2025 00:00 UTCCatalog metadata updated Oct 16, 2026 19:07 UTCOpen evidence recordA look into real threat actor activity targeting Langflow hosts using different techniques and tactics.
First reported Aug 28, 2026 00:00 UTCCatalog metadata updated Oct 16, 2026 19:07 UTCOpen evidence recordVulnCheck recently announced an IP Intelligence product that tracks attacker command & control (C2) infrastructure, as well as internet-facing potentially vulnerable systems. Using this data, we’ll explore the vulnerabilities that the 7777-Botnet is likely using to infect new hosts.
First reported Jan 18, 2024 00:00 UTCCatalog metadata updated Oct 16, 2026 19:07 UTCOpen evidence recordVulnCheck's inaugural THREATCON1 event brought together hundreds of cybersecurity professionals for a groundbreaking conference focused on emerging threats and innovative solutions.
First reported Oct 06, 2025 00:00 UTCCatalog metadata updated Oct 16, 2026 19:07 UTCOpen evidence recordVulnCheck now provides automated SSVC decisions for federal and enterprise agencies.
First reported Feb 13, 2025 00:00 UTCCatalog metadata updated Oct 16, 2026 19:07 UTCOpen evidence recordPublic CVE disclosure volumes are surging across major software suppliers and open source projects, and the evidence increasingly points to AI-assisted vulnerability discovery as the driving force.
First reported Jun 09, 2026 00:00 UTCCatalog metadata updated Oct 16, 2026 19:07 UTCOpen evidence recordVulnCheck Canaries captured live exploitation of XWiki CVE-2025-24893, a vulnerability absent from CISA KEV but actively abused in the wild.
First reported Oct 28, 2025 00:00 UTCCatalog metadata updated Oct 16, 2026 19:07 UTCOpen evidence recordVulnCheck was excited to breach ICS networks when CVE-2023-43261 was first disclosed. However, there is more to this than the CVE description would lead you to believe. Follow VulnCheck’s journey from CVE description to exploitation in the wild
First reported Oct 13, 2023 00:00 UTCCatalog metadata updated Oct 16, 2026 19:07 UTCOpen evidence recordRecapping our 2025 BlackHat and Defcon experience.
First reported Aug 12, 2025 00:00 UTCCatalog metadata updated Oct 16, 2026 19:07 UTCOpen evidence recordIn response to NIST NVD's announcement that it will significantly limit CVE enrichment starting April 15, 2026, VulnCheck reaffirms its commitment to filling the data gap through its free NVD++ community service and plans to expand coverage with CVSS scores over the next month
First reported Apr 16, 2026 15:00 UTCCatalog metadata updated Oct 16, 2026 19:07 UTCOpen evidence recordThe public shared-host view reaches the newest 2,400 matching records. Narrow the filters or search an exact MD5, SHA-1, or SHA-256 value to reach a specific record.
A filename, label, or report mention alone does not establish maliciousness. Observation dates describe cited sources; collection dates describe this local metadata catalog. No malware samples are stored, fetched, or executed by these pages.