Sign in Get started free

loading

Every new threat · Live · InfraStack

Sign in Get started free

Live· 115 threats · Sunday, Nov 1· last check 2026-11-04 06:15 UTC

Everything we’re watching.

Every new vulnerability, vendor incident and attack on AI tools, merged from every source as it lands. Early warnings before a CVE exists.

On fire Needs attention Early warnings Everything

Sunday, Nov 1

Most severe in everything

BREACHNO CVE YET

n0n ransomware breaks in with stolen or weak passwords (credential stuffing on FortiGate SSL-VPN, leaked AWS keys, RDP/WinRM), steals and wipes data and backups, and uses AI coding agents to write its tools; 93 victims including 38 port and maritime orgsFortiGate SSL-VPN

CAMPAIGNNO CVE YET

EXPLOITED IN THE WILD

Scanner disguised as ChatGPT, Claude and Perplexity bots hunts web servers for exposed .env files, cloud credentials and SSH keys (Cequence)WAF / bot management allowlists for AI crawlers

Prefab UI: Generative UI sandbox lets Python read and write server files

WAVLINK router: remote command injection via protocol.csp group_nameWL-WN530BE1-A

Sunday, Nov 1

HIGH7.6Apache Wicket: unescaped ids let injected script run in pagesPackage2026-11-01 23:17 UTCby EPSS–WHAT TO DO LOW2.3Apache Wicket: nested request handlers drop Content-Security-Policy headers on pagesPackage2026-11-01 23:17 UTCby EPSS–WHAT TO DO HIGH7.4Apache Wicket: ExternalLink on non-anchor tags runs attacker script on clickPackage2026-11-01 23:17 UTCby EPSS–WHAT TO DO MEDIUM6.3Apache Wicket: file path check misses style and locale suffixes, leaking HTML templatesPackage2026-11-01 23:17 UTCby EPSS–WHAT TO DO MEDIUM6.3Apache Wicket: template files served to clients in unusual class loader setupsPackage2026-11-01 23:17 UTCby EPSS–WHAT TO DO HIGH8.3Apache Wicket: upload resource lets clients set their own size limitsPackage2026-11-01 23:17 UTCby EPSS–WHAT TO DO HIGH8.3Apache Wicket: unauthenticated upload callback lets requests exhaust server heap memoryPackage2026-11-01 23:17 UTCby EPSS–WHAT TO DO HIGH7.4Apache Wicket: JavaScript quote escaping flaw enables script injection in pagesPackage2026-11-01 23:17 UTCby EPSS–WHAT TO DO HIGH7.4Apache Wicket: linkified text lets a crafted URL run script in users' sessionsPackage2026-11-01 23:17 UTCby EPSS–WHAT TO DO HIGH7.6Apache Wicket: remembered window name lets a page run attacker scriptPackage2026-11-01 23:17 UTCby EPSS–WHAT TO DO MEDIUM6.5MiniMax Code: find command handler lets remote attackers inject OS commandsMiniMax CodeAI agents & MCP2026-11-01 23:17 UTCby InfraStack Analyst–WHAT TO DO HIGH7.6Apache Wicket: resource bundle texts break out of JavaScript and markupPackage2026-11-01 23:17 UTCby EPSS–WHAT TO DO MALICIOUSDON'T INSTALLREMOVE ITMalicious code in dsh-screenshot-native (npm)dsh-screenshot-nativePackage2026-11-01 22:50 UTCby osv-malicious–UNINSTALL LOW2.1Apache Wicket: cross-origin request bypasses resource isolation after sign-in redirectPackage2026-11-01 22:17 UTCby EPSS–WHAT TO DO HIGH7.2Apache Wicket: session id not renewed on repeat sign-in, enabling fixationPackage2026-11-01 22:17 UTCby EPSS–WHAT TO DO MEDIUM6.3Apache Wicket: resource authorization skipped when served through componentsPackage2026-11-01 22:17 UTCby EPSS–WHAT TO DO MEDIUM6.9Apache Wicket: missing authorization lets callers invoke denied component listenersPackage2026-11-01 22:17 UTCby EPSS–WHAT TO DO LOW2.3Apache Wicket: WebSocket connections outlive ended sessions and keep their accessPackage2026-11-01 22:17 UTCby EPSS–WHAT TO DO LOW2.3Apache Wicket: WebSocket handlers skip authorization checks on hidden componentsPackage2026-11-01 22:17 UTCby EPSS–WHAT TO DO MEDIUM6.9Apache Wicket: hidden form buttons can still be submitted by crafted requestsPackage2026-11-01 22:17 UTCby EPSS–WHAT TO DO MEDIUM6.3Apache Wicket: WebSocket resources skip authorization checks, letting sessions reach themPackage2026-11-01 22:17 UTCby EPSS–WHAT TO DO MALICIOUSDON'T INSTALLREMOVE ITMalicious code in wallet-adapter-base (npm)wallet-adapter-basePackage2026-11-01 21:33 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in bigbob22-test (npm)bigbob22-testPackage2026-11-01 21:27 UTCby osv-malicious–UNINSTALL MEDIUM5.8FastBee IoT platform: remote code injection through Groovy script executorOther2026-11-01 21:17 UTCby EPSS–WHAT TO DO MEDIUMINCIDENTTwilio: SMS Delivery Failures from Twilio to KDDI JapanTwilioVendor2026-11-01 20:30 UTCby status page–WHAT TO DO LOW3.3Ruijie switches: cross-site scripting in cloud management URL settingInfrastructure2026-11-01 19:16 UTCby EPSS–WHAT TO DO HIGH7.8Ruijie switches: buffer overflow in firmware upgrade interface allows remote attackRG-ES205GCInfrastructure2026-11-01 19:16 UTCby InfraStack Analyst–WHAT TO DO CRITICAL9.9WAVLINK WN553X1-B router: remote OS command injection via WireGuard group handlerWN553X1-BInfrastructure2026-11-01 19:16 UTCby InfraStack Analyst–WHAT TO DO HIGHCAMPAIGNDATA EXPOSEDn0nn0n ransomware breaks in with stolen or weak passwords (credential stuffing on FortiGate SSL-VPN, leaked AWS keys, RDP/WinRM), steals and wipes data and backups, and uses AI coding agents to write its tools; 93 victims including 38 port and maritime orgsFortiGate SSL-VPNInfrastructure2026-10-28 08:02 UTCby InfraStack Analyst–WHAT TO DO MEDIUMINCIDENTFly.io: Outbound IPv4 connectivity failures in ARN, JNB, and GRUFly.ioVendor2026-11-01 18:50 UTCby status page–WHAT TO DO CRITICAL9.9PUBLIC EXPLOITWAVLINK WN553X1-B router: remote command injection via WireGuard handlerWN553X1-BInfrastructure2026-11-01 18:17 UTCby InfraStack Analyst–WHAT TO DO CRITICAL9.9PUBLIC EXPLOITWAVLINK WN553X1-B router: remote OS command injection via file_id argumentWN553X1-BInfrastructure2026-11-01 18:17 UTCby InfraStack Analyst–WHAT TO DO MEDIUM4.3ag-ui protocol: interrupt expiry check lets remote requests exhaust resourcesAI agents & MCP2026-11-01 18:17 UTCby EPSS–WHAT TO DO MALICIOUSDON'T INSTALLREMOVE ITMalicious code in atlassian-wallboard-plugin (npm)atlassian-wallboard-pluginPackage2026-11-01 18:05 UTCby osv-malicious–UNINSTALL MEDIUMNOT SCOREDGoogle::Auth for Perl: login callback accepts any local authorization codePackage2026-11-01 17:16 UTCby EPSS–WHAT TO DO NOT SCOREDNOT SCOREDGoogle::Auth for Perl: untrusted AWS credential config can force server-side requestsPackage2026-11-01 17:16 UTCby EPSS–WHAT TO DO MEDIUM6.5ag-ui protocol: improper input validation in transport decoder handlerAI agents & MCP2026-11-01 17:16 UTCby EPSS–WHAT TO DO HIGH7.1WordPress File Upload plugin: stored XSS through version 5.2.1Package2026-11-01 16:18 UTCby EPSS–WHAT TO DO CRITICAL9.3BookIt WordPress plugin: SQL injection lets attackers read or change databasebookitPackage2026-11-01 16:18 UTCby InfraStack Analyst–FIX 2.6.0.7 CRITICAL10.0Prefab UI: Generative UI sandbox lets Python read and write server filesPackage2026-11-01 16:18 UTCby EPSS–WHAT TO DO MEDIUM4.3AG-UI protocol SSE parser lets remote input exhaust client resourcesAI agents & MCP2026-11-01 16:18 UTCby EPSS–WHAT TO DO MEDIUM4.3ag-ui TypeScript client: a malicious server's huge HTTP error response can exhaust the client's memory@ag-ui/clientAI agents & MCP2026-11-01 16:18 UTCby InfraStack Analyst–WHAT TO DO MEDIUM5.5ag-ui-protocol: HttpAgent client flaw leaks information to remote attackersAI agents & MCP2026-11-01 16:18 UTCby EPSS–WHAT TO DO MEDIUM6.5JetFormBuilder: path traversal flaw affects versions through 3.6.7.1Package2026-11-01 16:18 UTCby EPSS–WHAT TO DO HIGH8.8Horizon DataSys Reboot Restore Standard: kernel driver memory corruption lets local users escalateOther2026-11-01 15:17 UTCby EPSS–WHAT TO DO CRITICAL9.9WAVLINK WN553X1-B router: authenticated OS command injection as root via openvpn_cli file_idWN553X1-BInfrastructure2026-11-01 15:17 UTCby InfraStack Analyst–WHAT TO DO CRITICAL9.9WAVLINK WN701AE router: web backend flaw allows remote OS command injectionWN701AEInfrastructure2026-11-01 15:17 UTCby InfraStack Analyst–WHAT TO DO CRITICAL9.1WAVLINK WN553X1-B router: remote OS command injection via file_id argumentWN553X1-BInfrastructure2026-11-01 14:18 UTCby InfraStack Analyst–WHAT TO DO CRITICAL9.9WAVLINK WN553X1-B router: remote command injection via group_id parameterWN553X1-BInfrastructure2026-11-01 14:18 UTCby InfraStack Analyst–WHAT TO DO LOW2.1jsv (Elixir): regex backtracking limit lets crafted data bypass schema validationPackage2026-10-31 11:28 UTCby EPSS–WHAT TO DO MEDIUMCAMPAIGNEXPLOITEDAI agent impersonationScanner disguised as ChatGPT, Claude and Perplexity bots hunts web servers for exposed .env files, cloud credentials and SSH keys (Cequence)WAF / bot management allowlists for AI crawlersInfrastructure2026-10-28by InfraStack Analyst–WHAT TO DO CRITICAL9.9Beta9: tenant can mount host paths and read other tenants' filesPackage2026-11-01 13:18 UTCby EPSS–WHAT TO DO CRITICAL9.9Beta9 worker: sandbox file API reads and writes host files as rootOther2026-11-01 13:18 UTCby EPSS–WHAT TO DO CRITICAL9.9Beta9: tenant image builds escape to the build worker hostOther2026-11-01 13:18 UTCby EPSS–WHAT TO DO CRITICAL9.9WAVLINK WN701AE router: web backend command injection via rule_name argumentWN701AEInfrastructure2026-11-01 13:18 UTCby InfraStack Analyst–WHAT TO DO LOW3.3Xiongmai P2PAPI.dll: buffer overflow in P2PAPI_Connect on WindowsOther2026-11-01 12:17 UTCby EPSS–WHAT TO DO NOT SCOREDNOT SCOREDHTTP::Session Perl module: memcached command injection via session cookiePackage2026-11-01 11:18 UTCby EPSS–WHAT TO DO CRITICAL9.1Oray Pugongying X5 Pro router: path traversal in config restore lets attackers write filesPugongying X5 ProInfrastructure2026-11-01 11:18 UTCby InfraStack Analyst–WHAT TO DO CRITICAL9.9Oray Pugongying X5 Pro 7.6.1: a restricted account can run any admin API through run_apis_by_json (factory reset shown)Pugongying X5 ProInfrastructure2026-11-01 11:18 UTCby InfraStack Analyst–WHAT TO DO HIGHNOT SCOREDGitea: OAuth2 account linking lets attacker take over other accountsPackage2026-11-01 09:42 UTCby EPSS–WHAT TO DO LOW3.1Oray Pugongying X5 Pro: weak session IDs let remote attackers guess sessionsInfrastructure2026-11-01 10:18 UTCby EPSS–WHAT TO DO NOT SCOREDNOT SCOREDGitea-style forge: public-only tokens read hidden users' profiles and feedsPackage2026-11-01 09:42 UTCby EPSS–WHAT TO DO NOT SCOREDNOT SCOREDPersonal access tokens bypass scope checks on the user profile routeOther2026-11-01 09:43 UTCby EPSS–WHAT TO DO LOWNOT SCOREDGitHub project boards exposed titles of private pull requestsOther2026-11-01 09:42 UTCby EPSS–WHAT TO DO NOT SCOREDNOT SCOREDForgejo-style git host: public-only token can delete private org repositoriesOther2026-11-01 09:42 UTCby EPSS–WHAT TO DO MEDIUMNOT SCOREDGitea: REST API lets users change issues in archived repositoriesPackage2026-11-01 09:42 UTCby EPSS–WHAT TO DO MEDIUMNOT SCOREDGitea: public-only tokens could still create private repositories and organizationsPackage2026-11-01 09:42 UTCby EPSS–WHAT TO DO NOT SCOREDNOT SCOREDOAuth2 userinfo endpoint leaks private organization and team memberships to token holdersOther2026-11-01 09:42 UTCby EPSS–WHAT TO DO HIGHNOT SCOREDGitea: review-triggered workflows run attacker commits and leak Actions secretsgiteaInfrastructure2026-11-01 09:42 UTCby InfraStack Analyst–FIX 28.3.0 NOT SCOREDNOT SCOREDOCI registry blob mount lets a token copy private package data publicInfrastructure2026-11-01 09:42 UTCby EPSS–WHAT TO DO MEDIUMNOT SCOREDGitea: Helm chart upload can exhaust server CPU via decompressionPackage2026-11-01 09:42 UTCby EPSS–WHAT TO DO NOT SCOREDNOT SCOREDIssue tracker: dependency links leak private issue titles and bodies to readersOther2026-11-01 09:42 UTCby EPSS–WHAT TO DO MEDIUMNOT SCOREDGitHub: public-only tokens could list private repository names and metadataVendor2026-11-01 09:42 UTCby EPSS–WHAT TO DO HIGHNOT SCOREDAdmin API let public-only access tokens create site administrator accountsRuntime2026-11-01 09:42 UTCby EPSS–WHAT TO DO LOWNOT SCOREDGitea: Actions job could fake trusted commit signatures on any repositoryOther2026-11-01 09:42 UTCby EPSS–WHAT TO DO NOT SCOREDNOT SCOREDPUBLIC EXPLOITForge API let writers change archived repositories' releases and labelsOther2026-11-01 09:42 UTCby EPSS–WHAT TO DO HIGHNOT SCOREDGitea: public-only tokens can register runners that receive private organization jobsRuntime2026-11-01 09:42 UTCby InfraStack Analyst–WHAT TO DO NOT SCOREDNOT SCOREDGitea: heatmap API leaks private-repo contribution counts to public-only tokensRuntime2026-11-01 09:42 UTCby EPSS–WHAT TO DO HIGHNOT SCOREDGitea: Actions artifact downloads let uploaded HTML run scripts on the origingiteaRuntime2026-11-01 09:42 UTCby InfraStack Analyst–FIX 28.3.0 MEDIUMNOT SCOREDGitea: Actions job tokens list every private repository on the instanceRuntime2026-11-01 09:42 UTCby EPSS–WHAT TO DO MALICIOUSDON'T INSTALLREMOVE ITMalicious code in @axon-web/icons (npm)@axon-web/iconsPackage2026-11-01 08:02 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in hs-framework (npm)hs-frameworkPackage2026-11-01 08:01 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in privacypass-py (PyPI)privacypass-pyPackage2026-11-01 08:01 UTCby osv-malicious–UNINSTALL MEDIUM4.0Typemill: SVG upload sanitizer flaw enables cross-site scriptingOther2026-11-01 07:17 UTCby EPSS–WHAT TO DO MEDIUM4.3loguru: crafted ANSI color markup causes regex slowdown in loggingPackage2026-11-01 07:17 UTCby EPSS–WHAT TO DO CRITICAL10.0WAVLINK router: remote command injection via protocol.csp group_nameWL-WN530BE1-AInfrastructure2026-11-01 05:18 UTCby InfraStack Analyst–WHAT TO DO MEDIUMNOT SCOREDMapPress WordPress plugin leaks user emails and display names to visitorsPackage2026-11-01 05:18 UTCby EPSS–WHAT TO DO MEDIUMNOT SCOREDMedia Library Assistant WordPress plugin: shortcode attribute enables stored cross-site scriptingPackage2026-11-01 05:18 UTCby EPSS–WHAT TO DO MEDIUMNOT SCOREDWordPress Media Library Assistant: any logged-in user can read private taxonomy termsPackage2026-11-01 05:18 UTCby EPSS–WHAT TO DO MEDIUMNOT SCOREDKali Forms WordPress plugin: subscribers can send spoofed emailPackage2026-11-01 05:18 UTCby EPSS–WHAT TO DO MEDIUMNOT SCOREDKali Forms WordPress plugin: any logged-in user can read admin email addressesPackage2026-11-01 05:18 UTCby EPSS–WHAT TO DO CRITICAL9.9PUBLIC EXPLOITWAVLINK WL-WN530HG4B router: remote command injection via port forwardingWL-WN530HG4BInfrastructure2026-11-01 04:18 UTCby InfraStack Analyst–WHAT TO DO CRITICAL9.9WAVLINK WN579X3-D router: command injection via port forwarding lets remote attackers run commandsWN579X3-DInfrastructure2026-11-01 04:18 UTCby InfraStack Analyst–WHAT TO DO CRITICAL10.0WAVLINK WL-WN579A3-A router: remote command injection via setup wizardWL-WN579A3-AInfrastructure2026-11-01 04:18 UTCby InfraStack Analyst–WHAT TO DO MALICIOUSDON'T INSTALLREMOVE ITMalicious code in axelarjs-sdk (npm)axelarjs-sdkPackage2026-11-01 02:23 UTCby osv-malicious–UNINSTALL MEDIUM5.5Presenton: desktop authentication middleware exposes files under app_dataAI agents & MCP2026-11-01 02:16 UTCby EPSS–WHAT TO DO MALICIOUSDON'T INSTALLREMOVE ITMalicious code in sol-wallet-adapter (npm)sol-wallet-adapterPackage2026-11-01 01:46 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in cutekitten-test (npm)cutekitten-testPackage2026-11-01 01:32 UTCby osv-malicious–UNINSTALL MEDIUM6.8imagecodecs: crafted lossless JPEG overflows stack and crashes the processPackage2026-11-01 01:17 UTCby EPSS–WHAT TO DO MEDIUM6.8imagecodecs: crafted CCITT Group 4 stream hangs decoding process indefinitelyPackage2026-11-01 01:17 UTCby EPSS–WHAT TO DO MEDIUM6.0OpenAlgo: email code skips TLS certificate checks, exposing SMTP credentialsPackage2026-11-01 01:17 UTCby EPSS–WHAT TO DO MEDIUM6.9Thelia: back-office forms let a crafted link rewrite product prices and stockOther2026-10-01 16:49 UTCby EPSS–WHAT TO DO MEDIUM4.8Thelia: stored XSS via uploaded SVG store logos and bannersRuntime2026-10-01 16:50 UTCby EPSS–WHAT TO DO MEDIUM6.8FFmpeg: crafted Huffyuv video leaks heap memory into decoded framesPackage2026-11-01 01:17 UTCby EPSS–WHAT TO DO MEDIUM6.8FFmpeg: CDXL decoder leaks stack memory into decoded video pixelsPackage2026-11-01 01:17 UTCby EPSS–WHAT TO DO MEDIUM6.8FFmpeg: truncated Sun Raster images leak stale heap memory into decoded outputPackage2026-11-01 01:17 UTCby EPSS–WHAT TO DO MEDIUM6.8FFmpeg: truncated PCX image leaks heap memory into decoded pixelsPackage2026-11-01 01:17 UTCby EPSS–WHAT TO DO MEDIUM6.8FFmpeg: crafted Go2Meeting video stream leaks stack memory into outputRuntime2026-11-01 01:17 UTCby EPSS–WHAT TO DO HIGH7.5Presenton: API endpoint lacks authentication, allowing remote access to functionsPackage2026-11-01 01:17 UTCby EPSS–WHAT TO DO MEDIUM4.0PostyBirb Plus: submission description editor lets a remote attacker run scriptsPackage2026-11-01 01:17 UTCby EPSS–WHAT TO DO CRITICAL10.0D-Link DIR-505 router: remote stack overflow in TFTP upload handlerDIR-505Infrastructure2026-11-01 01:17 UTCby InfraStack Analyst–WHAT TO DO MALICIOUSDON'T INSTALLREMOVE ITMalicious code in calculator-preinstall-hook-demo (npm)calculator-preinstall-hook-demoPackage2026-11-01 00:40 UTCby osv-malicious–UNINSTALL MALICIOUSDON'T INSTALLREMOVE ITMalicious code in calculator-preinstall-chain-demo (npm)calculator-preinstall-chain-demoPackage2026-11-01 00:39 UTCby osv-malicious–UNINSTALL NOT SCOREDNOT SCOREDXS::libbrotli for Perl: decoder out-of-bounds write from bundled brotliPackage2026-11-01 00:16 UTCby EPSS–WHAT TO DO MALICIOUSDON'T INSTALLREMOVE ITMalicious code in pystr-codec (PyPI)pystr-codecPackage2026-11-01 00:13 UTCby osv-malicious–UNINSTALL

Saturday, Oct 31Sunday, Nov 1Monday, Nov 2