For coding agents

Sign in Get started free

loading

Every new threat · Live · InfraStack

Sign in Get started free

Live· 28 threats · Wednesday, Sep 23· last check 2026-11-05 04:17 UTC

Everything we’re watching.

Every new vulnerability, vendor incident and attack on AI tools, merged from every source as it lands. Early warnings before a CVE exists.

On fire Needs attention Early warnings Everything

Wednesday, Sep 23

Most severe in everything

EXPLOITED IN THE WILD

Plex Media Server: admin can write files that run as codePlex Media Server1 talking

EXPLOITED IN THE WILD

Plex Media Server: encoded URI flaw lets attackers call plugin functionsPlex Media Server

EXPLOITED IN THE WILD

Plex Media Server: any token can force server-side requests to attacker hostsPlex Media Server

Moquette: Pattern-ACL wildcard injection (cross-tenant authorization bypass) plus a remote-unauthenticated DoS cluster, a Will-message authorization bypass, and a cross-session durable-corruption bugio.moquette:moquette-broker

Check new threats with your coding agent

It checks this feed against your repository before you add a dependency, and whenever you ask about a CVE.

Nothing matches here.

Tuesday, Sep 22Wednesday, Sep 23Thursday, Sep 24