Published file metadata, source observations, indicators, and research history in one bounded catalog.
2,400+Reachable catalog records
89 / 100Current catalog page
24Maximum records per page
0Samples downloaded by this page
Feed collection status
Sources represented on this page. Publication and observation dates describe the content; successful batch dates describe local collection. A recent batch does not certify complete coverage or current provider availability.
intelligence_src_1325ef79144357aa4cRecent successful batchLast successful batch: Last attempt:
Stale means older than twice the recorded collection interval, with a minimum of one hour; without an interval, the threshold is 24 hours. Cached content remains available while a feed is stale, paused, or unverified.
2,400+ MATCHING RECORDSMETADATA ONLY / SOURCE ATTRIBUTION PRESERVED
Multiple vulnerabilities have been discovered in NetScaler ADC and NetScaler Gateway, the most severe of which could allow for remote code execution. NetScaler ADC is a networking product that functions as an Application Delivery Controller (ADC), optimizing, securing, and ensuring reliable availability of applications for businesses. NetScaler Gateway is a secure remote access solution that provides users with single sign-on (SSO) access to applications and resources from any device. Successful exploitation of the most severe of these vulnerabilities could allow for remote code execution of commands on the system.
First reported Sep 28, 2026 14:15 UTCCatalog metadata updated Oct 13, 2026 06:56 UTCOpen evidence record
A vulnerability has been discovered in the GlobalProtect portal and gateway of PAN-OS which could allow for authentication bypass. The PAN-OS GlobalProtect Portal acts as the central control plane for Palo Alto Networks VPN infrastructure. Successful exploitation of the vulnerability allows the attacker to bypass security restrictions and establish an unauthorized VPN connection.
First reported Jun 22, 2026 17:39 UTCCatalog metadata updated Oct 13, 2026 06:56 UTCOpen evidence record
Multiple vulnerabilities have been discovered in Google Chrome, the most severe of which could allow for arbitrary code execution. Successful exploitation of the most severe of these vulnerabilities could allow for arbitrary code execution in the context of the logged on user. Depending on the privileges associated with the user an attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than those who operate with administrative user rights.
First reported Aug 12, 2026 15:16 UTCCatalog metadata updated Oct 13, 2026 06:56 UTCOpen evidence record
Multiple vulnerabilities have been discovered in Oracle products, the most severe of which could allow for arbitrary code execution. Successful exploitation of the most severe of these vulnerabilities could result in an attacker gaining the same privileges as the logged-on user. Depending on the privileges associated with the user, an attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than those who operate with administrative user rights.
First reported Aug 19, 2026 11:35 UTCCatalog metadata updated Oct 13, 2026 06:56 UTCOpen evidence record
A vulnerability has been discovered in Zoom Clients that could allow for remote code execution. Zoom is a cloud-based communications platform that allows users to connect via video, audio, chat, and content sharing. Successful exploitation could allow an attacker to target meeting participants, execute code without user interaction, steal data, activate cameras or microphones, and install malware.
First reported Aug 12, 2026 15:02 UTCCatalog metadata updated Oct 13, 2026 06:56 UTCOpen evidence record
Multiple vulnerabilities have been discovered in SolarWinds Web Help Desk, the most severe of which could allow for authentication bypass. SolarWinds Web Help Desk software grants access to SolarWinds IT support, asset management, and knowledge base operations. A vulnerability in the Web Help Desk could allow an unauthenticated, remote attacker to bypass authentication and gain access. This does require the SAML 2.0 authentication method to be enabled.
First reported Aug 03, 2026 17:05 UTCCatalog metadata updated Oct 13, 2026 06:56 UTCOpen evidence record
Multiple vulnerabilities have been discovered in Adobe products, the most severe of which could allow for arbitrary code execution.Adobe Campaign Classic is an enterprise-grade marketing automation platform that helps organizations design, automate, and track complex, personalized cross-channel marketing campaigns.Adobe ColdFusion is a commercial rapid web application development platform used to build and deploy dynamic web and mobile applications.Successful exploitation of the most severe of these vulnerabilities could allow for arbitrary code execution in the context of the logged on user. Depending on the privileges associated with the user, an attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than those who operate with administrative user rights.
First reported Jul 01, 2026 19:09 UTCCatalog metadata updated Oct 13, 2026 06:56 UTCOpen evidence record
Multiple vulnerabilities have been discovered in IBM Concert Software, the most severe of which could allow for remote code execution. IBM Concert is an agentic IT operations (IT Ops) and resilience platform designed to unify fragmented data, context, and actions across an enterprise's hybrid cloud and IT environments. Successful exploitation of the most severe of these vulnerabilities could allow for remote code execution with the privileges of the affected application.
First reported Sep 24, 2026 16:59 UTCCatalog metadata updated Oct 13, 2026 06:56 UTCOpen evidence record
Multiple vulnerabilities have been discovered in Mozilla products, the most severe of which could allow for arbitrary code execution. Mozilla Firefox is a web browser used to access the Internet.Thunderbird is a free, open-source email, calendar, and chat application.Successful exploitation of the most severe of these vulnerabilities could allow for arbitrary code execution. Depending on the privileges associated with the user an attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than those who operate with administrative user rights.
First reported Jul 01, 2026 18:48 UTCCatalog metadata updated Oct 13, 2026 06:56 UTCOpen evidence record
Multiple vulnerabilities have been discovered in SonicWall SMA1000 Series Appliances, the most severe of which could allow for remote code execution. SonicWall Secure Mobile Access (SMA) 1000 Series appliances are enterprise-grade secure access and SSL VPN gateways. Successful exploitation of the most severe vulnerability could allow an unauthenticated, remote attacker to reach internal functionality and perform unauthorized operations on an affected appliance.
First reported Oct 12, 2026 06:48 UTCCatalog metadata updated Oct 13, 2026 06:56 UTCOpen evidence record
Multiple Vulnerabilities have been discovered in SonicWall SMA1000 Series Appliances, which when chained together could allow for remote code execution, potentially leading to full system compromise. SonicWall Secure Mobile Access (SMA) 1000 Series appliances are enterprise-grade secure access and SSL VPN gateways. Successful exploitation of the vulnerabilities could allow for remote code execution.
First reported Sep 02, 2026 21:01 UTCCatalog metadata updated Oct 13, 2026 06:56 UTCOpen evidence record
Multiple vulnerabilities have been discovered in ServiceNow's AI Platform, the most severe of which could allow for unauthorized access. The ServiceNow AI Platform is a unified, cloud-based foundation that integrates artificial intelligence, data, and workflow automation to execute business operations across entire enterprises. Successful exploitation of the most severe of these vulnerabilities could allow for unauthorized access.
First reported Sep 25, 2026 18:59 UTCCatalog metadata updated Oct 13, 2026 06:56 UTCOpen evidence record
Multiple vulnerabilities have been discovered in Dell System Update (DSU), the most severe of which could allow for remote code execution. Dell System Update (DSU) is a free Dell utility for Windows that scans your Dell computer and automatically finds, downloads, and installs the latest BIOS, driver, firmware, and application updates for it. Successful exploitation of the most severe of these vulnerabilities could allow for remote code execution as root, which may lead to the complete compromise of the vulnerable application and the underlying operating system.
First reported Oct 12, 2026 06:47 UTCCatalog metadata updated Oct 13, 2026 06:56 UTCOpen evidence record
Multiple vulnerabilities have been discovered in Microsoft products, the most severe of which could allow for remote code execution. Successful exploitation of the most severe of these vulnerabilities could result in an attacker gaining the same privileges as the logged-on user. Depending on the privileges associated with the user, an attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than those who operate with administrative user rights.
First reported Jul 14, 2026 18:28 UTCCatalog metadata updated Oct 13, 2026 06:56 UTCOpen evidence record
Multiple vulnerabilities have been discovered in Adobe products, the most severe of which could allow for arbitrary code execution.Adobe Bridge is a powerful asset management tool that allows creative professionals to preview, organize, edit, and publish multiple creative assets efficiently across the Creative Cloud ecosystem.Adobe Format Plugins are software add-ons used by Adobe applications to handle file formats, convert data types, and process specific file structures safely.Successful exploitation of the most severe of these vulnerabilities could allow for arbitrary code execution in the context of the logged on user. Depending on the privileges associated with the user, an attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than those who operate with administrative user rights.
First reported Jul 28, 2026 17:30 UTCCatalog metadata updated Oct 13, 2026 06:56 UTCOpen evidence record
A vulnerability in Atlassian Data Center products could allow for arbitrary file access. Atlassian Data Center products are self-managed, enterprise-grade editions of Atlassian tools such as Jira, Confluence, Bitbucket, and Jira Service Management, which organizations host on their own infrastructure or private cloud and which offer clustering, high availability, and greater control over data, security, and scaling. Successful exploitation of this vulnerability could allow for arbitrary file access.
First reported Oct 12, 2026 06:49 UTCCatalog metadata updated Oct 13, 2026 06:56 UTCOpen evidence record
A vulnerability has been discovered in VeloCloud Orchestrator (VCO) On-Prem that could allow for remote code execution. VeloCloud Orchestrator is a centralized management platform used to configure, provision, monitor, and troubleshoot software-defined wide area networks (SD-WAN) and SASE components across enterprise edges and gateways. Successful exploitation of this vulnerability may allow a remote attacker to access privileged internal functionality, execute commands, and impact the VCO host. Depending on the privileges associated with the service account, an attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Services whose accounts are configured to have less rights on the system could be less impacted than those who operate with administrative user rights.
First reported Jul 28, 2026 13:51 UTCCatalog metadata updated Oct 13, 2026 06:56 UTCOpen evidence record
Multiple vulnerabilities have been discovered in MikroTik Routers, the most severe of which could allow for admin hijacking. MikroTik routers are network devices that use the RouterOS operating system to provide advanced routing, firewall, wireless, VPN, bandwidth management, and network security features for homes, businesses, and internet service providers. Successful exploitation of the most severe of these vulnerabilities could allow an attacker to take full control of a device without authentication.
First reported Sep 14, 2026 19:52 UTCCatalog metadata updated Oct 13, 2026 06:56 UTCOpen evidence record
Multiple vulnerabilities have been discovered in Adobe products, the most severe of which could allow for arbitrary code execution.Adobe After Effects is a digital visual effects and motion graphics application used for creating cinematic movie titles, transitions, and complex animation sequences.Adobe Animate is a professional vector animation software used to design interactive animations and multimedia content for games, television, and websites.Adobe Audition is a professional audio workstation and editing toolset designed for mixing, restoring, and precisely engineering audio content for film, broadcast, and podcasts.Adobe Bridge is a powerful asset management tool that allows creative professionals to preview, organize, edit, and publish multiple creative assets efficiently across the Creative Cloud ecosystem.Adobe ColdFusion is a commercial rapid web application development platform used to build and deploy dynamic web and mobile applications.Adobe Commerce is an enterprise-level e-commerce platform that allows businesses to build, manage, and scale secure online storefronts for both B2B and B2C audiences.Adobe Content Credentials SDK (Software Development Kit) is a developer toolset that allows applications to attach secure, tamper-evident metadata to digital content like images, video, and audio.Adobe Creative Cloud Desktop Application is a central hub that allows users to download, update, and manage their Adobe software, manage cloud storage, and access shared creative assets and fonts.Adobe Experience Manager (AEM) is an enterprise-grade digital experience platform that combines a Content Management System (CMS) and a Digital Asset Management (DAM) system.Adobe Illustrator is the industry-standard vector graphics software used by designers to create scalable logos, icons, typography, and complex illustrations.Adobe Media Encoder is a robust background processing application used to automate the ingest, transcoding, proxy creation, and output of video and audio files across various formats and devices.Adobe Premiere Pro is a timeline-based, industry-leading video editing software program designed for professional filmmakers, broadcasters, and content creators.Successful exploitation of the most severe of these vulnerabilities could allow for arbitrary code execution in the context of the logged on user. Depending on the privileges associated with the user, an attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than those who operate with administrative user rights.
First reported Jul 14, 2026 18:30 UTCCatalog metadata updated Oct 13, 2026 06:56 UTCOpen evidence record
A vulnerability has been discovered in GitLab, which could allow disclosure of sensitive data. GitLab GitLab is a DevOps platform that provides source code management, CI/CD pipelines, issue tracking, and collaboration tools in a single application for software development teams. Successful exploitation of this vulnerability could allow for path traversal, leading to disclosure of potentially sensitive information such SSH keys, database credentials, deploy tokens. Depending on the sensitive information retrieved via this technique, the attacker may gain further access to the appliance or systems.
First reported Sep 14, 2026 16:05 UTCCatalog metadata updated Oct 13, 2026 06:56 UTCOpen evidence record
A vulnerability has been discovered in F5 BIG-IP Access Policy Manager (APM) that could allow for remote code execution. BIG-IP APM is a widely deployed network access and identity management solution used across government agencies, financial institutions, healthcare organizations, and large enterprises to control application and network access. Successful exploitation of this vulnerability could result in an attacker gaining full control of the affected system. Depending on the privileges associated with the account, an attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Accounts configured to have fewer user rights on the system could be less impacted than those that operate with administrative user rights.
First reported Sep 23, 2026 03:09 UTCCatalog metadata updated Oct 13, 2026 06:56 UTCOpen evidence record
Multiple vulnerabilities have been discovered in Oracle products, the most severe of which could allow for arbitrary code execution. Successful exploitation of the most severe of these vulnerabilities could result in an attacker gaining the same privileges as the logged-on user. Depending on the privileges associated with the user, an attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than those who operate with administrative user rights.
First reported Sep 17, 2026 16:14 UTCCatalog metadata updated Oct 13, 2026 06:56 UTCOpen evidence record
Multiple vulnerabilities have been discovered in Adobe products, the most severe of which could allow for arbitrary code execution.Adobe Experience Manager (AEM) is an enterprise-grade digital experience platform that combines content management, digital asset management, and digital enrollment into a single cloud-native solution.Adobe ColdFusion is a commercial rapid web application development platform used to build, deploy, and scale dynamic enterprise web and mobile applications.Adobe Photoshop is a professional raster graphics editor used to create, edit, and manipulate digital images.Adobe Illustrator is an industry-standard vector graphics editor and design software used to create infinitely scalable artwork, logos, icons, typography, and complex illustrations.Adobe Animate is computer animation and multimedia authoring software.Adobe Commerce is a flexible, enterprise-level e-commerce platform built on top of Magento technology that helps businesses create and manage online stores.Adobe Acrobat Reader is a free software application used to view, print, sign, share, and annotate PDF (Portable Document Format) files.Adobe Campaign Classic is an enterprise marketing automation and cross-channel campaign management platform used to design, execute, and orchestrate customer journeys across online and offline channels.Successful exploitation of the most severe of these vulnerabilities could allow for arbitrary code execution in the context of the logged on user. Depending on the privileges associated with the user, an attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than those who operate with administrative user rights.
First reported Sep 08, 2026 19:24 UTCCatalog metadata updated Oct 13, 2026 06:56 UTCOpen evidence record
A vulnerability has been discovered in WordPress that could allow arbitrary code on the web server. WordPress is a free, open-source content management system (CMS) that allows you to build and manage websites without needing to write code. Successful exploitation allows an unauthenticated attacker to manipulate the page-template resolution logic to execute local PHP files outside the active theme directory, potentially leading to Remote Code Execution (RCE) under specific conditions.
First reported Oct 01, 2026 20:37 UTCCatalog metadata updated Oct 13, 2026 06:56 UTCOpen evidence record
The public shared-host view reaches the newest 2,400 matching records. Narrow the filters or search an exact MD5, SHA-1, or SHA-256 value to reach a specific record.
A filename, label, or report mention alone does not establish maliciousness. Observation dates describe cited sources; collection dates describe this local metadata catalog. No malware samples are stored, fetched, or executed by these pages.