Vulnerabilities

Summary — last 7 days

New vulnerabilities2,722▼ 518 vs. last week
Critical / high1,296▼ 206 vs. last week
New active exploitation (KEV)3▼ 5 vs. last week
Unscored (no CVSS)226▼ 276 vs. last week
–

3 results, sorted by published date (most recent first)

CVEStatusSeverityEPSS Active exploitationAffected technologiesPublished ▼Modified Description
ModifiedMedium (5)1.3%—Icab3/24/20106/16/2026
Integer overflow in Alexander Clauss iCab allows remote attackers to bypass intended port restrictions on outbound TCP connections via a port number outside the range of the unsigned short data type, as demonstrated by a value of 65561 for TCP port 25.
ModifiedHigh (7.5)2.4%💥 ExploitAfricabegone Africa BE Gone8/10/20086/16/2026
PHP remote file inclusion vulnerability in index.php in Africa Be Gone (ABG) 1.0a allows remote attackers to execute arbitrary PHP code via a URL in the abg_path parameter.
ModifiedLow (2.6)1.4%—Alexander Clauss Icab7/13/20056/16/2026
iCab 2.9.8 does not clearly associate a Javascript dialog box with the web page that generated it, which allows remote attackers to spoof a dialog box from a trusted site and facilitates phishing attacks, aka the "Dialog Origin Spoofing Vulnerability."
Orbitaley — Vulnerabilities