Æ / PUBLIC MALWARE INTELLIGENCE

Follow the evidence.

Published file metadata, source observations, indicators, and research history in one bounded catalog.

100Reachable catalog records

5 / 5Current catalog page

24Maximum records per page

0Samples downloaded by this page

Feed collection status

Sources represented on this page. Publication and observation dates describe the content; successful batch dates describe local collection. A recent batch does not certify complete coverage or current provider availability.

1 sources: 0 stale, 0 needing attention, 0 paused, 1 unverified.

Review source update dates and status

src_dd4a4c98d64bc46b3fCollection status unverifiedLast successful batch: Unverified

Stale means older than twice the recorded collection interval, with a minimum of one hour; without an interval, the threshold is 24 hours. Cached content remains available while a feed is stale, paused, or unverified.

100 MATCHING RECORDSMETADATA ONLY / SOURCE ATTRIBUTION PRESERVED

REPORT1 SOURCE

Aimy Captcha-Less Form Guard: The Anti-Bot Plugin That Hands Bots the Keys

VulnCheck's Initial Access Intelligence team details an unauthenticated PHP object injection in the Aimy Captcha-Less Form Guard plugin for Joomla, where a repeating-key XOR published alongside its own ciphertext turns every protected form into an unserialize() sink and, on Joomla 3.9 through 5.2.1, into remote code execution.

First reported Jul 30, 2026 00:00 UTCCatalog metadata updated Oct 08, 2026 03:54 UTCOpen evidence record

REPORT1 SOURCE

The First CVE Wave: Signs That AI-Assisted Vulnerability Discovery Is Reshaping Disclosure Volumes

Public CVE disclosure volumes are surging across major software suppliers and open source projects, and the evidence increasingly points to AI-assisted vulnerability discovery as the driving force.

First reported May 14, 2026 00:00 UTCCatalog metadata updated Oct 08, 2026 03:54 UTCOpen evidence record

REPORT1 SOURCE

Tales from the Exploit Mines: Gladinet Triofox CVE-2025-12480 RCE

Triofox CVE-2025-12480 exploitation from beginning to end, all sharp edges included.

First reported Dec 18, 2025 00:00 UTCCatalog metadata updated Oct 08, 2026 03:54 UTCOpen evidence record

REPORT1 SOURCE

Tracking CVEs Attributed to Anthropic Researchers and Project Glasswing

A primary source breakdown of every CVE publicly credited to Anthropic researchers and Project Glasswing, based on a full search of the CVE record database.

First reported Apr 15, 2026 15:00 UTCCatalog metadata updated Oct 08, 2026 03:54 UTCOpen evidence record

A filename, label, or report mention alone does not establish maliciousness. Observation dates describe cited sources; collection dates describe this local metadata catalog. No malware samples are stored, fetched, or executed by these pages.