corpus.blog
41554 blogs · [ { "id": "01a0d8b1-7b71-7311-811c-d0c2ba49ada7", "title": "Virtualizor: The Login Parameter That Skips the Login", "url": "https://www.vulncheck.com/blog/virtualizor-billing-hook-unauthenticated-root-rce", "published_at": "2026-09-22T00:00:00+00:00" }, { "id": "01a0b87b-2ea2-70b4-96d7-9792a26b5036", "title": "ENISA's CRA Single Reporting Platform Just Went Live. Here's What You Actually Need to Know.", "url": "https://www.vulncheck.com/blog/enisa-cra-single-reporting-platform", "published_at": "2026-09-14T00:00:00+00:00" }, { "id": "01a0b87b-2ea2-70b4-96d7-9792a33464f2", "title": "FileRun: Four More Ways to Run Your Files", "url": "https://www.vulncheck.com/blog/filerun-delegated-admin-sql-to-object-injection-rce", "published_at": "2026-09-10T00:00:00+00:00" }, { "id": "01a0b87b-2ea2-70b4-96d7-9792a3d0a635", "title": "The Anthropic Glasswing Receipts Are Starting to Trickle In", "url": "https://www.vulncheck.com/blog/anthropic-glasswing-receipts", "published_at": "2026-09-08T00:00:00+00:00" }, { "id": "01a0b87b-2ea2-70b4-96d7-9792a3f3abdb", "title": "Same Target, Different Playbooks: Two Attackers, Two Different Paths to Pwning the AI Stack", "url": "https://www.vulncheck.com/blog/pwning-the-ai-stack", "published_at": "2026-08-28T00:00:00+00:00" }, { "id": "01a0b87b-2ea2-70b4-96d7-9792a44f798a", "title": "Chinese Implants in the Supply Chain", "url": "https://www.vulncheck.com/blog/zbt-darklantern-speakingstone", "published_at": "2026-08-27T00:00:00+00:00" }, { "id": "01a0b87b-2ea2-70b4-96d7-9792a4fbd484", "title": "Exploiting SharePoint: CVE-2026-55040 and CVE-2026-63520 RCE Chain", "url": "https://www.vulncheck.com/blog/cve-2026-63520-sharepoint-unsafe-type-rce", "published_at": "2026-08-24T00:00:00+00:00" }, { "id": "01a0b87b-2ea2-70b4-96d7-9792a5befa3c", "title": "Death By 20,000 PoCs", "url": "https://www.vulncheck.com/blog/death-by-20k-pocs", "published_at": "2026-08-20T00:00:00+00:00" }, { "id": "01a0b87b-2ea2-70b4-96d7-9792a6b46cd2", "title": "FileRun: When Your File Manager Runs Your Files", "url": "https://www.vulncheck.com/blog/filerun-thumbnail-command-injection-rce", "published_at": "2026-08-13T00:00:00+00:00" }, { "id": "01a0b87b-2ea2-70b4-96d7-9792a72cfde3", "title": "ENDLESSDOORS Is Phoning Home. Pick Up.", "url": "https://www.vulncheck.com/blog/zbt-endlessdoors", "published_at": "2026-08-05T00:00:00+00:00" }, { "id": "01a0b87b-2ea2-70b4-96d7-9792a75a592f", "title": "Aimy Captcha-Less Form Guard: The Anti-Bot Plugin That Hands Bots the Keys", "url": "https://www.vulncheck.com/blog/aimy-captcha-less-form-guard-object-injection", "published_at": "2026-07-30T00:00:00+00:00" }, { "id": "01a0b87b-2ea2-70b4-96d7-9792a7b6b1f0", "title": "VulnCheck State of Exploitation 1H-2026", "url": "https://www.vulncheck.com/blog/state-of-exploitation-1h-2026", "published_at": "2026-07-28T00:00:00+00:00" }, { "id": "01a0b87b-2ea2-70b4-96d7-9792a85a02e1", "title": "WP2Shell Vulnerabilities: CVE-2026-60137 and CVE-2026-63030", "url": "https://www.vulncheck.com/blog/wp2shell", "published_at": "2026-07-17T00:00:00+00:00" }, { "id": "01a0b87b-2ea2-70b4-96d7-9792a8cb2f65", "title": "Finding the Routers Energetic Bear Is Looking For", "url": "https://www.vulncheck.com/blog/energetic-target-intel", "published_at": "2026-07-14T00:00:00+00:00" }, { "id": "01a0b87b-2ea2-70b4-96d7-9792a9bd0813", "title": "Monsta FTP: An SSRF Blocklist That Forgot IPv6 Exists", "url": "https://www.vulncheck.com/blog/monsta-ftp-ssrf-ipv6-blocklist-bypass", "published_at": "2026-07-14T00:00:00+00:00" }, { "id": "01a0b87b-2ea2-70b4-96d7-9792aa4f7314", "title": "NVIDIA GEN3C: Unauthenticated RCE via Pickle Deserialization in the Inference API", "url": "https://www.vulncheck.com/blog/nvidia-gen3c-unauth-pickle-rce", "published_at": "2026-06-25T00:00:00+00:00" }, { "id": "01a0b87b-2ea2-70b4-96d7-9792aa84fb32", "title": "CVE-2026-28496 - FOSSBilling Auth Bypass and Twig SSTI to Unauthenticated RCE", "url": "https://www.vulncheck.com/blog/fossbilling-auth-bypass-ssti-rce", "published_at": "2026-06-23T00:00:00+00:00" }, { "id": "01a0b87b-2ea3-72e6-99b3-011d2f1acd2c", "title": "From Canary Intelligence to C2 - Mapping an Attack Fleet with Target Intelligence", "url": "https://www.vulncheck.com/blog/meowproject", "published_at": "2026-06-12T00:00:00+00:00" }, { "id": "01a0b87b-2ea3-72e6-99b3-011d2f6a4fb6", "title": "Copy Fail and Its Descendants: A Real Human's Guide to Kernel Page-Cache LPEs", "url": "https://www.vulncheck.com/blog/copy-fails-descendants-recent-linux-lpes", "published_at": "2026-06-11T00:00:00+00:00" }, { "id": "01a0b87b-2ea3-72e6-99b3-011d2ff112c8", "title": "Helping Federal Agencies Meet CISA’s Accelerated Remediation Timelines outlined in CISA BOD 26-04", "url": "https://www.vulncheck.com/blog/cisa-bod-26-04", "published_at": "2026-06-10T00:00:00+00:00" }, { "id": "01a0b87b-2ea3-72e6-99b3-011d30b78493", "title": "Observations on Anthropic’s Vulnerability Disclosure Ledger", "url": "https://www.vulncheck.com/blog/anthropic-ledger", "published_at": "2026-06-09T00:00:00+00:00" }, { "id": "01a0b87b-2ea3-72e6-99b3-011d315a698d", "title": "Quantifying 2026 Routinely Targeted Vulnerabilities (So Far)", "url": "https://www.vulncheck.com/blog/routinely-targeted-vulnerabilities-may-2026", "published_at": "2026-05-21T00:00:00+00:00" }, { "id": "01a0b87b-2ea3-72e6-99b3-011d32469027", "title": "9 Year-Old PHP Vulnerability Keeps Swinging As One of the Most Targeted Vulnerabilities", "url": "https://www.vulncheck.com/blog/cve-2017-9841", "published_at": "2026-05-19T14:00:00+00:00" }, { "id": "01a0b87b-2ea3-72e6-99b3-011d326112dc", "title": "The First CVE Wave: Signs That AI-Assisted Vulnerability Discovery Is Reshaping Disclosure Volumes", "url": "https://www.vulncheck.com/blog/ai-assisted-vulnerability-discovery", "published_at": "2026-05-14T00:00:00+00:00" }, { "id": "01a0b87b-2ea3-72e6-99b3-011d327b2c37", "title": "Learn How to Operationalize Exploit Intelligence in Splunk with VulnCheck’s New Splunkbase App", "url": "https://www.vulncheck.com/blog/vulncheck-exploit-intelligence-app-in-splunkbase", "published_at": "2026-04-20T14:00:00+00:00" }, { "id": "01a0b87b-2ea3-72e6-99b3-011d33004127", "title": "VulnCheck’s Commitment to Expanding Access to Vulnerability Enrichment", "url": "https://www.vulncheck.com/blog/expanding-vulnerability-enrichment", "published_at": "2026-04-16T15:00:00+00:00" }, { "id": "01a0b87b-2ea3-72e6-99b3-011d332788b4", "title": "Tracking CVEs Attributed to Anthropic Researchers and Project Glasswing", "url": "https://www.vulncheck.com/blog/anthropic-glasswing-cves", "published_at": "2026-04-15T15:00:00+00:00" }, { "id": "01a0b87b-2ea3-72e6-99b3-011d33883c1e", "title": "CVE-2026-20079 - Cisco FMC Authentication Bypass RCE Analysis", "url": "https://www.vulncheck.com/blog/cisco-fmc-auth-bypass-cve-2026-20079", "published_at": "2026-03-26T22:00:00+00:00" }, { "id": "01a0b87b-2ea3-72e6-99b3-011d3470b98a", "title": "The Return of the Kinsing", "url": "https://www.vulncheck.com/blog/return-of-the-kinsing", "published_at": "2026-03-26T14:00:00+00:00" }, { "id": "01a0b87b-2ea3-72e6-99b3-011d3477a827", "title": "2026 State of Exploitation: Exploiting The Network Edge", "url": "https://www.vulncheck.com/blog/network-edge-device-report-2026", "published_at": "2026-03-23T14:00:00+00:00" }, { "id": "01a0b87b-2ea3-72e6-99b3-011d3535e8b1", "title": "n8n Should Have More Than One CISA KEV Entry", "url": "https://www.vulncheck.com/blog/n8n-needs-more-kev", "published_at": "2026-03-20T00:00:00+00:00" }, { "id": "01a0b87b-2ea3-72e6-99b3-011d36080615", "title": "Herding Cats: Recent Cisco SD-WAN Manager Vulnerabilities", "url": "https://www.vulncheck.com/blog/cisco-sd-wan-manager-vulns", "published_at": "2026-03-12T00:00:00+00:00" }, { "id": "01a0b87b-2ea3-72e6-99b3-011d36dacb4f", "title": "SiftRanking Canary Intelligence", "url": "https://www.vulncheck.com/blog/siftrank_canaries", "published_at": "2026-03-02T00:00:00+00:00" }, { "id": "01a0b87b-2ea3-72e6-99b3-011d37339587", "title": "Introducing the 2026 VulnCheck Exploit Intelligence Report", "url": "https://www.vulncheck.com/blog/2026-vulncheck-exploit-intelligence-report", "published_at": "2026-02-25T00:00:00+00:00" }, { "id": "01a0b87b-2ea3-72e6-99b3-011d37c38d85", "title": "What 28 Days of Faster Vulnerability Intelligence Is Worth", "url": "https://www.vulncheck.com/blog/economic-value-lead-time", "published_at": "2026-02-11T00:00:00+00:00" }, { "id": "01a0b87b-2ea3-72e6-99b3-011d3847842e", "title": "Making Serialization Gadgets by Hand - Java", "url": "https://www.vulncheck.com/blog/making-java-gadgets", "published_at": "2026-02-05T00:00:00+00:00" }, { "id": "01a0b87b-2ea3-72e6-99b3-011d392ea60f", "title": "Metro4Shell: Exploitation of React Native’s Metro Server in the Wild", "url": "https://www.vulncheck.com/blog/metro4shell_eitw", "published_at": "2026-02-03T00:00:00+00:00" }, { "id": "01a0b87b-2ea3-72e6-99b3-011d3a135aa4", "title": "Street Smarts: SmarterMail ConnectToHub Unauthenticated RCE (CVE-2026-24423)", "url": "https://www.vulncheck.com/blog/smartermail-connecttohub-rce-cve-2026-24423", "published_at": "2026-01-26T00:00:00+00:00" }, { "id": "01a0b87b-2ea3-72e6-99b3-011d3a712171", "title": "VulnCheck State of Exploitation 2026", "url": "https://www.vulncheck.com/blog/state-of-exploitation-2026", "published_at": "2026-01-21T00:00:00+00:00" }, { "id": "01a0b87b-2ea3-72e6-99b3-011d3a9292f3", "title": "How to Report a Security Vulnerability to VulnCheck", "url": "https://www.vulncheck.com/blog/report-a-vulnerability", "published_at": "2026-01-09T00:00:00+00:00" }, { "id": "01a0b87b-2ea3-72e6-99b3-011d3b40de0f", "title": "FortiCloud SSO Login Bypass Vulnerabilities Exploited in the Wild", "url": "https://www.vulncheck.com/blog/forticloud-sso-login-bypass", "published_at": "2025-12-18T00:00:00+00:00" }, { "id": "01a0b87b-2ea3-72e6-99b3-011d3c128a6b", "title": "Tales from the Exploit Mines: Gladinet Triofox CVE-2025-12480 RCE", "url": "https://www.vulncheck.com/blog/triofox-exploit-cve-2025-12480", "published_at": "2025-12-18T00:00:00+00:00" }, { "id": "01a0b87b-2ea3-72e6-99b3-011d3c2d680a", "title": "What's Next: React2Shell Beyond Next.js", "url": "https://www.vulncheck.com/blog/react2shell-beyond-nextjs", "published_at": "2025-12-16T00:00:00+00:00" }, { "id": "01a0b87b-2ea3-72e6-99b3-011d3c83916e", "title": "Critical CVEs, CVSS v4, and the Adoption Gap No One Talks About", "url": "https://www.vulncheck.com/blog/cvss-severity", "published_at": "2025-12-15T00:00:00+00:00" }, { "id": "01a0b87b-2ea3-72e6-99b3-011d3cac15b8", "title": "React2Shell Exploits on GitHub", "url": "https://www.vulncheck.com/blog/react2shell-github", "published_at": "2025-12-12T00:00:00+00:00" }, { "id": "01a0b87b-2ea3-72e6-99b3-011d3da8631b", "title": "React2Shell and What Our Canaries See", "url": "https://www.vulncheck.com/blog/react2shell-canaries", "published_at": "2025-12-09T00:00:00+00:00" }, { "id": "01a0b87b-2ea3-72e6-99b3-011d3ea451e5", "title": "Reacting to Shells: React2Shell Variants & the CVE-2025-55182 Exploit Ecosystem", "url": "https://www.vulncheck.com/blog/reacting-to-shells-react2shell-variants-ecosystem", "published_at": "2025-12-08T00:00:00+00:00" }, { "id": "01a0b87b-2ea3-72e6-99b3-011d3ecd9fbe", "title": "Frost Checks First: Selective Exploitation", "url": "https://www.vulncheck.com/blog/frost-checks-first", "published_at": "2025-12-04T00:00:00+00:00" }, { "id": "01a0b87b-2ea3-72e6-99b3-011d3f8c479a", "title": "Critical vulnerability in React and Next.js (CVE-2025-55182)", "url": "https://www.vulncheck.com/blog/cve-2025-55182-react-nextjs", "published_at": "2025-12-03T00:00:00+00:00" }, { "id": "01a0b87b-2ea3-72e6-99b3-011d404fae00", "title": "Helping Improve and Scale the CVE Ecosystem Through the Lens of Security Research", "url": "https://www.vulncheck.com/blog/helping-scale-cve", "published_at": "2025-12-02T00:00:00+00:00" }, { "id": "01a0b87b-2ea3-72e6-99b3-011d407acf30", "title": "The Mystery OAST Host Behind a Regionally Focused Exploit Operation", "url": "https://www.vulncheck.com/blog/mystery-oast", "published_at": "2025-11-27T00:00:00+00:00" }, { "id": "01a0b87b-2ea3-72e6-99b3-011d4157cf77", "title": "Introducing VulnCheck Canary Intelligence", "url": "https://www.vulncheck.com/blog/introducing-vulncheck-canary-intelligence", "published_at": "2025-11-17T00:00:00+00:00" }, { "id": "01a0b87b-2ea3-72e6-99b3-011d41609a65", "title": "Fortinet FortiWeb Exploitation Hits Silently Patched Vulnerability", "url": "https://www.vulncheck.com/blog/fortinet-forti-web-exploitation-hits-silently-patched-vulnerability", "published_at": "2025-11-14T00:00:00+00:00" }, { "id": "01a0b87b-2ea3-72e6-99b3-011d422ac31c", "title": "XWiki Under Increased Attack", "url": "https://www.vulncheck.com/blog/xwiki-under-increased-attack", "published_at": "2025-11-14T00:00:00+00:00" }, { "id": "01a0b87b-2ea3-72e6-99b3-011d4268c4ad", "title": "Making Serialization Gadgets by Hand - .NET", "url": "https://www.vulncheck.com/blog/making-dotnet-gadgets", "published_at": "2025-11-12T00:00:00+00:00" }, { "id": "01a0b87b-2ea3-72e6-99b3-011d428ee94c", "title": "VulnCheck Research Highlights: November 2025", "url": "https://www.vulncheck.com/blog/november-2025-research-highlights", "published_at": "2025-11-05T00:00:00+00:00" }, { "id": "01a0b87b-2ea3-72e6-99b3-011d434cd8da", "title": "XWiki CVE-2025-24893 Exploited in the Wild", "url": "https://www.vulncheck.com/blog/xwiki-cve-2025-24893-eitw", "published_at": "2025-10-28T00:00:00+00:00" }, { "id": "01a0b87b-2ea3-72e6-99b3-011d43cddfe6", "title": "Accelerating Our Footprint and Innovation: Why VulnCheck Posted a Record-Setting Q3", "url": "https://www.vulncheck.com/blog/q3-2025-momentum", "published_at": "2025-10-16T00:00:00+00:00" }, { "id": "01a0b87b-2ea3-72e6-99b3-011d4499963a", "title": "ICTBroadcast Command Injection Actively Exploited (CVE-2025-2611)", "url": "https://www.vulncheck.com/blog/ictbroadcast-kev", "published_at": "2025-10-14T00:00:00+00:00" }, { "id": "01a0b87b-2ea3-72e6-99b3-011d44bdcb78", "title": "VulnCheck Research Highlights: October 2025", "url": "https://www.vulncheck.com/blog/october-2025-research-highlights", "published_at": "2025-10-09T00:00:00+00:00" }, { "id": "01a0b87b-2ea3-72e6-99b3-011d45a6b107", "title": "THREATCON1 2025 Recap: A New Standard for Cybersecurity Events", "url": "https://www.vulncheck.com/blog/2025-threatcon1-recap", "published_at": "2025-10-06T00:00:00+00:00" }, { "id": "01a0b87b-2ea3-72e6-99b3-011d468ac8e1", "title": "Oracle E-Business Suite CVE-2025-61882 Exploited in Extortion Attacks", "url": "https://www.vulncheck.com/blog/oracle-e-business-suite-cve-2025-61882-exploited-in-extortion-attacks", "published_at": "2025-10-06T00:00:00+00:00" }, { "id": "01a0b87b-2ea3-72e6-99b3-011d4775ccc1", "title": "CVE-2025-10035: Critical Vulnerability in Fortra GoAnywhere MFT", "url": "https://www.vulncheck.com/blog/cve-2025-10035-fortra-go-anywhere-mft", "published_at": "2025-09-19T00:00:00+00:00" }, { "id": "01a0b87b-2ea3-72e6-99b3-011d47a79fde", "title": "Getting Ahead of Exploitation with Initial Access Intelligence", "url": "https://www.vulncheck.com/blog/vulncheck-initial-access", "published_at": "2025-09-11T00:00:00+00:00" }, { "id": "01a0b87b-2ea3-72e6-99b3-011d48039dbb", "title": "VulnCheck Insights: CVE Context at the Hover of Your Cursor", "url": "https://www.vulncheck.com/blog/vulncheck-insights-chrome-extension", "published_at": "2025-09-08T00:00:00+00:00" }, { "id": "01a0b87b-2ea3-72e6-99b3-011d48245db3", "title": "New Citrix NetScaler Zero-Day Vulnerability Exploited in the Wild", "url": "https://www.vulncheck.com/blog/new-citrix-netscaler-zero-day-vulnerability-exploited-in-the-wild", "published_at": "2025-08-26T00:00:00+00:00" }, { "id": "01a0b87b-2ea3-72e6-99b3-011d48cb7413", "title": "ScriptCase - Hunt It, Exploit It, Defend It", "url": "https://www.vulncheck.com/blog/scriptcase-rce", "published_at": "2025-08-14T00:00:00+00:00" }, { "id": "01a0b87b-2ea3-72e6-99b3-011d4933eae0", "title": "Dispatch from the Desert: VulnCheck at BlackHat, Security Wasteland, and DEFCON", "url": "https://www.vulncheck.com/blog/blackhat-2025-review", "published_at": "2025-08-12T00:00:00+00:00" }, { "id": "01a0b87b-2ea3-72e6-99b3-011d49fe18b6", "title": "Command Injection in Jenkins via Git Parameter (CVE-2025-53652)", "url": "https://www.vulncheck.com/blog/git-parameter-rce", "published_at": "2025-08-07T00:00:00+00:00" }, { "id": "01a0b87b-2ea3-72e6-99b3-011d4a084e4a", "title": "Still Up. Still Evil.", "url": "https://www.vulncheck.com/blog/stillup-stillevil", "published_at": "2025-07-31T00:00:00+00:00" }, { "id": "01a0b87b-2ea3-72e6-99b3-011d4abaaa08", "title": "State of Exploitation - A look Into The 1H-2025 Vulnerability Exploitation & Threat Activity", "url": "https://www.vulncheck.com/blog/state-of-exploitation-1h-2025", "published_at": "2025-07-30T00:00:00+00:00" }, { "id": "01a0b87b-2ea3-72e6-99b3-011d4b6eb670", "title": "Novel Use of \"mount\" Spotted in Hikvision Attacks", "url": "https://www.vulncheck.com/blog/hikvision-mount-shell", "published_at": "2025-07-24T00:00:00+00:00" }, { "id": "01a0b87b-2ea3-72e6-99b3-011d4ba0928e", "title": "The Linuxsys Cryptominer", "url": "https://www.vulncheck.com/blog/linuxsys-cryptominer", "published_at": "2025-07-17T00:00:00+00:00" }, { "id": "01a0b87b-2ea3-72e6-99b3-011d4be80427", "title": "Expanding VulnCheck’s KEV: Auditing ShadowServer, New CVE Assignments, and Source Expansion", "url": "https://www.vulncheck.com/blog/kev-expansion-2025", "published_at": "2025-07-10T00:00:00+00:00" }, { "id": "01a0b87b-2ea3-72e6-99b3-011d4ca7ca30", "title": "VulnCheck Integrates with ThreatQuotient: Operationalize Exploit Intelligence in the ThreatQ Platform and is Now Generally Available on the ThreatQ Marketplace", "url": "https://www.vulncheck.com/blog/vulncheck-threatquotient-partnership", "published_at": "2025-07-02T00:00:00+00:00" }, { "id": "01a0b87b-2ea3-72e6-99b3-011d4d6aa56b", "title": "Timely Threat Intelligence for Defenders with VulnCheck KEV Alerts", "url": "https://www.vulncheck.com/blog/vulncheck-kev-alerts", "published_at": "2025-06-25T00:00:00+00:00" }, { "id": "01a0b87b-2ea3-72e6-99b3-011d4e3189d4", "title": "CVE Fragility Is Real, But Totally Fixable.", "url": "https://www.vulncheck.com/blog/cve-fragility", "published_at": "2025-05-23T00:00:00+00:00" }, { "id": "01a0b87b-2ea3-72e6-99b3-011d4ea834a0", "title": "Understanding Exploit Proof-of-Concept", "url": "https://www.vulncheck.com/blog/understanding-exploit-proof-of-concept", "published_at": "2025-05-23T00:00:00+00:00" }, { "id": "01a0b87b-2ea3-72e6-99b3-011d4f66b78d", "title": "Understanding Initial Access Exploits", "url": "https://www.vulncheck.com/blog/understanding-initial-access-exploits", "published_at": "2025-05-23T00:00:00+00:00" }, { "id": "01a0b87b-2ea3-72e6-99b3-011d4fd9c471", "title": "Understanding Exploit Availability", "url": "https://www.vulncheck.com/blog/understanding-exploit-availability", "published_at": "2025-05-21T00:00:00+00:00" }, { "id": "01a0b87b-2ea3-72e6-99b3-011d5077732a", "title": "Understanding Exploit Maturity", "url": "https://www.vulncheck.com/blog/understanding-exploit-maturity", "published_at": "2025-05-21T00:00:00+00:00" }, { "id": "01a0b87b-2ea3-72e6-99b3-011d513ad3f4", "title": "Understanding Software Dependency Graphs", "url": "https://www.vulncheck.com/blog/understanding-software-dependency-graphs", "published_at": "2025-05-21T00:00:00+00:00" }, { "id": "01a0b87b-2ea3-72e6-99b3-011d51d865de", "title": "Understanding Software Supply Chain Security", "url": "https://www.vulncheck.com/blog/understanding-software-supply-chain-security", "published_at": "2025-05-21T00:00:00+00:00" }, { "id": "01a0b87b-2ea3-72e6-99b3-011d5212ce02", "title": "Does ENISA EUVD live up to all the hype?", "url": "https://www.vulncheck.com/blog/enisa-euvd", "published_at": "2025-05-20T00:00:00+00:00" }, { "id": "01a0b87b-2ea3-72e6-99b3-011d530a37d9", "title": "2025 Q1 Trends in Vulnerability Exploitation", "url": "https://www.vulncheck.com/blog/exploitation-trends-q1-2025", "published_at": "2025-04-24T00:00:00+00:00" }, { "id": "01a0b87b-2ea3-72e6-99b3-011d53866a69", "title": "Understanding Command & Control (C2) Infrastructure", "url": "https://www.vulncheck.com/blog/understanding-command-control-infrastructure", "published_at": "2025-04-21T00:00:00+00:00" }, { "id": "01a0b87b-2ea3-72e6-99b3-011d540479af", "title": "Attacker Infrastructure", "url": "https://www.vulncheck.com/blog/attacker-infrastructure", "published_at": "2025-04-18T00:00:00+00:00" }, { "id": "01a0b87b-2ea3-72e6-99b3-011d547c48d2", "title": "Understanding APTs", "url": "https://www.vulncheck.com/blog/understanding-apts", "published_at": "2025-04-18T00:00:00+00:00" }, { "id": "01a0b87b-2ea3-72e6-99b3-011d54ffa8db", "title": "NIST’s New Deferred CVE Status: What It Means for Defenders", "url": "https://www.vulncheck.com/blog/nist-nvd-deferred", "published_at": "2025-04-14T00:00:00+00:00" }, { "id": "01a0b87b-2ea3-72e6-99b3-011d55fbfb75", "title": "VulnCheck & Filigran: Delivering Actionable Security Intelligence for the Enterprise", "url": "https://www.vulncheck.com/blog/vulncheck-filigran-parternship", "published_at": "2025-03-27T00:00:00+00:00" }, { "id": "01a0b87b-2ea3-72e6-99b3-011d5606147d", "title": "Exploring VulnCheck Intelligence in OpenCTI", "url": "https://www.vulncheck.com/blog/opencti-integration", "published_at": "2025-03-13T00:00:00+00:00" }, { "id": "01a0b87b-2ea3-72e6-99b3-011d567d7659", "title": "BigAnt Small Chain - CVE-2025-0364 Exploitation", "url": "https://www.vulncheck.com/blog/bigant-cve-2025-0364", "published_at": "2025-02-27T00:00:00+00:00" }, { "id": "01a0b87b-2ea3-72e6-99b3-011d56a35ab0", "title": "Exposing CVEs from Black Bastas' Chats", "url": "https://www.vulncheck.com/blog/black-basta-chats", "published_at": "2025-02-24T00:00:00+00:00" }, { "id": "01a0b87b-2ea3-72e6-99b3-011d57485374", "title": "Helping Enterprises & Governments Adopt Stakeholder Specific Vulnerability Categorization (SSVC)", "url": "https://www.vulncheck.com/blog/automating-ssvc", "published_at": "2025-02-13T00:00:00+00:00" }, { "id": "01a0b87b-2ea3-72e6-99b3-011d58245dae", "title": "Zyxel HTTP Vulnerability", "url": "https://www.vulncheck.com/blog/zyxel-http-vuln", "published_at": "2025-02-07T00:00:00+00:00" }, { "id": "01a0b87b-2ea3-72e6-99b3-011d584814ef", "title": "Zyxel Telnet Vulnerabilities", "url": "https://www.vulncheck.com/blog/zyxel-telnet-vulns", "published_at": "2025-02-04T00:00:00+00:00" }, { "id": "01a0b87b-2ea3-72e6-99b3-011d5901e431", "title": "2024 Trends in Vulnerability Exploitation", "url": "https://www.vulncheck.com/blog/2024-exploitation-trends", "published_at": "2025-02-03T00:00:00+00:00" }, { "id": "01a0b87b-2ea3-72e6-99b3-011d59997fcb", "title": "New Year, New UI", "url": "https://www.vulncheck.com/blog/new-year-new-ui", "published_at": "2025-01-30T00:00:00+00:00" }, { "id": "01a0b87b-2ea3-72e6-99b3-011d5a83b98e", "title": "VulnCheck Initial Access Intelligence - 2024 Year in Review", "url": "https://www.vulncheck.com/blog/vulncheck-iai-2024", "published_at": "2025-01-29T00:00:00+00:00" }, { "id": "01a0b87b-2ea3-72e6-99b3-011d5ab95215", "title": "Four-Faith Industrial Router CVE-2024-12856 Exploited in the Wild", "url": "https://www.vulncheck.com/blog/four-faith-cve-2024-12856", "published_at": "2024-12-27T00:00:00+00:00" } ] posts Claim your blog
Back to vulncheck.com
Blog · corpus.blog/blogs/vulncheck.com/posts

vulncheck.com

vulncheck.com

2026

Virtualizor: The Login Parameter That Skips the Loginoriginal ↗
22 Sept 2026
ENISA's CRA Single Reporting Platform Just Went Live. Here's What You Actually Need to Know.original ↗
14 Sept 2026
FileRun: Four More Ways to Run Your Filesoriginal ↗
10 Sept 2026
The Anthropic Glasswing Receipts Are Starting to Trickle Inoriginal ↗
8 Sept 2026
Same Target, Different Playbooks: Two Attackers, Two Different Paths to Pwning the AI Stackoriginal ↗
28 Aug 2026
Chinese Implants in the Supply Chainoriginal ↗
27 Aug 2026
Exploiting SharePoint: CVE-2026-55040 and CVE-2026-63520 RCE Chainoriginal ↗
24 Aug 2026
Death By 20,000 PoCsoriginal ↗
20 Aug 2026
FileRun: When Your File Manager Runs Your Filesoriginal ↗
13 Aug 2026
ENDLESSDOORS Is Phoning Home. Pick Up.original ↗
5 Aug 2026
Aimy Captcha-Less Form Guard: The Anti-Bot Plugin That Hands Bots the Keysoriginal ↗
30 Jul 2026
VulnCheck State of Exploitation 1H-2026original ↗
28 Jul 2026
WP2Shell Vulnerabilities: CVE-2026-60137 and CVE-2026-63030original ↗
17 Jul 2026
Finding the Routers Energetic Bear Is Looking Fororiginal ↗
14 Jul 2026
Monsta FTP: An SSRF Blocklist That Forgot IPv6 Existsoriginal ↗
14 Jul 2026
NVIDIA GEN3C: Unauthenticated RCE via Pickle Deserialization in the Inference APIoriginal ↗
25 Jun 2026
CVE-2026-28496 - FOSSBilling Auth Bypass and Twig SSTI to Unauthenticated RCEoriginal ↗
23 Jun 2026
From Canary Intelligence to C2 - Mapping an Attack Fleet with Target Intelligenceoriginal ↗
12 Jun 2026
Copy Fail and Its Descendants: A Real Human's Guide to Kernel Page-Cache LPEsoriginal ↗
11 Jun 2026
Helping Federal Agencies Meet CISA’s Accelerated Remediation Timelines outlined in CISA BOD 26-04original ↗
10 Jun 2026
Observations on Anthropic’s Vulnerability Disclosure Ledgeroriginal ↗
9 Jun 2026
Quantifying 2026 Routinely Targeted Vulnerabilities (So Far)original ↗
21 May 2026
9 Year-Old PHP Vulnerability Keeps Swinging As One of the Most Targeted Vulnerabilitiesoriginal ↗
19 May 2026
The First CVE Wave: Signs That AI-Assisted Vulnerability Discovery Is Reshaping Disclosure Volumesoriginal ↗
14 May 2026
Learn How to Operationalize Exploit Intelligence in Splunk with VulnCheck’s New Splunkbase Apporiginal ↗
20 Apr 2026
VulnCheck’s Commitment to Expanding Access to Vulnerability Enrichmentoriginal ↗
16 Apr 2026
Tracking CVEs Attributed to Anthropic Researchers and Project Glasswingoriginal ↗
15 Apr 2026
CVE-2026-20079 - Cisco FMC Authentication Bypass RCE Analysisoriginal ↗
26 Mar 2026
The Return of the Kinsingoriginal ↗
26 Mar 2026
2026 State of Exploitation: Exploiting The Network Edgeoriginal ↗
23 Mar 2026
n8n Should Have More Than One CISA KEV Entryoriginal ↗
20 Mar 2026
Herding Cats: Recent Cisco SD-WAN Manager Vulnerabilitiesoriginal ↗
12 Mar 2026
SiftRanking Canary Intelligenceoriginal ↗
2 Mar 2026
Introducing the 2026 VulnCheck Exploit Intelligence Reportoriginal ↗
25 Feb 2026
What 28 Days of Faster Vulnerability Intelligence Is Worthoriginal ↗
11 Feb 2026
Making Serialization Gadgets by Hand - Javaoriginal ↗
5 Feb 2026
Metro4Shell: Exploitation of React Native’s Metro Server in the Wildoriginal ↗
3 Feb 2026
Street Smarts: SmarterMail ConnectToHub Unauthenticated RCE (CVE-2026-24423)original ↗
26 Jan 2026
VulnCheck State of Exploitation 2026original ↗
21 Jan 2026
How to Report a Security Vulnerability to VulnCheckoriginal ↗
9 Jan 2026

2025

FortiCloud SSO Login Bypass Vulnerabilities Exploited in the Wildoriginal ↗
18 Dec 2025
Tales from the Exploit Mines: Gladinet Triofox CVE-2025-12480 RCEoriginal ↗
18 Dec 2025
What's Next: React2Shell Beyond Next.jsoriginal ↗
16 Dec 2025
Critical CVEs, CVSS v4, and the Adoption Gap No One Talks Aboutoriginal ↗
15 Dec 2025
React2Shell Exploits on GitHuboriginal ↗
12 Dec 2025
React2Shell and What Our Canaries Seeoriginal ↗
9 Dec 2025
Reacting to Shells: React2Shell Variants & the CVE-2025-55182 Exploit Ecosystemoriginal ↗
8 Dec 2025
Frost Checks First: Selective Exploitationoriginal ↗
4 Dec 2025
Critical vulnerability in React and Next.js (CVE-2025-55182)original ↗
3 Dec 2025
Helping Improve and Scale the CVE Ecosystem Through the Lens of Security Researchoriginal ↗
2 Dec 2025
The Mystery OAST Host Behind a Regionally Focused Exploit Operationoriginal ↗
27 Nov 2025
Introducing VulnCheck Canary Intelligenceoriginal ↗
17 Nov 2025
Fortinet FortiWeb Exploitation Hits Silently Patched Vulnerabilityoriginal ↗
14 Nov 2025
XWiki Under Increased Attackoriginal ↗
14 Nov 2025
Making Serialization Gadgets by Hand - .NEToriginal ↗
12 Nov 2025
VulnCheck Research Highlights: November 2025original ↗
5 Nov 2025
XWiki CVE-2025-24893 Exploited in the Wildoriginal ↗
28 Oct 2025
Accelerating Our Footprint and Innovation: Why VulnCheck Posted a Record-Setting Q3original ↗
16 Oct 2025
ICTBroadcast Command Injection Actively Exploited (CVE-2025-2611)original ↗
14 Oct 2025
VulnCheck Research Highlights: October 2025original ↗
9 Oct 2025
THREATCON1 2025 Recap: A New Standard for Cybersecurity Eventsoriginal ↗
6 Oct 2025
Oracle E-Business Suite CVE-2025-61882 Exploited in Extortion Attacksoriginal ↗
6 Oct 2025
CVE-2025-10035: Critical Vulnerability in Fortra GoAnywhere MFToriginal ↗
19 Sept 2025
Getting Ahead of Exploitation with Initial Access Intelligenceoriginal ↗
11 Sept 2025
VulnCheck Insights: CVE Context at the Hover of Your Cursororiginal ↗
8 Sept 2025
New Citrix NetScaler Zero-Day Vulnerability Exploited in the Wildoriginal ↗
26 Aug 2025
ScriptCase - Hunt It, Exploit It, Defend Itoriginal ↗
14 Aug 2025
Dispatch from the Desert: VulnCheck at BlackHat, Security Wasteland, and DEFCONoriginal ↗
12 Aug 2025
Command Injection in Jenkins via Git Parameter (CVE-2025-53652)original ↗
7 Aug 2025
Still Up. Still Evil.original ↗
31 Jul 2025
State of Exploitation - A look Into The 1H-2025 Vulnerability Exploitation & Threat Activityoriginal ↗
30 Jul 2025
Novel Use of "mount" Spotted in Hikvision Attacksoriginal ↗
24 Jul 2025
The Linuxsys Cryptomineroriginal ↗
17 Jul 2025
Expanding VulnCheck’s KEV: Auditing ShadowServer, New CVE Assignments, and Source Expansionoriginal ↗
10 Jul 2025
VulnCheck Integrates with ThreatQuotient: Operationalize Exploit Intelligence in the ThreatQ Platform and is Now Generally Available on the ThreatQ Marketplaceoriginal ↗
2 Jul 2025
Timely Threat Intelligence for Defenders with VulnCheck KEV Alertsoriginal ↗
25 Jun 2025
CVE Fragility Is Real, But Totally Fixable.original ↗
23 May 2025
Understanding Exploit Proof-of-Conceptoriginal ↗
23 May 2025
Understanding Initial Access Exploitsoriginal ↗
23 May 2025
Understanding Exploit Availabilityoriginal ↗
21 May 2025
Understanding Exploit Maturityoriginal ↗
21 May 2025
Understanding Software Dependency Graphsoriginal ↗
21 May 2025
Understanding Software Supply Chain Securityoriginal ↗
21 May 2025
Does ENISA EUVD live up to all the hype?original ↗
20 May 2025
2025 Q1 Trends in Vulnerability Exploitationoriginal ↗
24 Apr 2025
Understanding Command & Control (C2) Infrastructureoriginal ↗
21 Apr 2025
Attacker Infrastructureoriginal ↗
18 Apr 2025
Understanding APTsoriginal ↗
18 Apr 2025
NIST’s New Deferred CVE Status: What It Means for Defendersoriginal ↗
14 Apr 2025
VulnCheck & Filigran: Delivering Actionable Security Intelligence for the Enterpriseoriginal ↗
27 Mar 2025
Exploring VulnCheck Intelligence in OpenCTIoriginal ↗
13 Mar 2025
BigAnt Small Chain - CVE-2025-0364 Exploitationoriginal ↗
27 Feb 2025
Exposing CVEs from Black Bastas' Chatsoriginal ↗
24 Feb 2025
Helping Enterprises & Governments Adopt Stakeholder Specific Vulnerability Categorization (SSVC)original ↗
13 Feb 2025
Zyxel HTTP Vulnerabilityoriginal ↗
7 Feb 2025
Zyxel Telnet Vulnerabilitiesoriginal ↗
4 Feb 2025
2024 Trends in Vulnerability Exploitationoriginal ↗
3 Feb 2025
New Year, New UIoriginal ↗
30 Jan 2025
VulnCheck Initial Access Intelligence - 2024 Year in Revieworiginal ↗
29 Jan 2025

2024

Four-Faith Industrial Router CVE-2024-12856 Exploited in the Wildoriginal ↗
27 Dec 2024
Next