| SHA256 | cc76bc218627279ecb4d0ce74ad2651e9db9e3e843e35d6569576e056e3a9218 | HIGH | CVE-2026-46300: Linux Kernel Privilege Escalation via Shared Fragment Handling | 2026-11-03 |
| SHA256 | 13382c16e2401b07451577b46e634b8031ec254d98b876e59692b5fa22abc1d4 | HIGH | CVE-2026-46300: Linux Kernel Privilege Escalation via Shared Fragment Handling | 2026-11-03 |
| SHA256 | 6fbae3505ae0d638b820165c572d548ce92dda71e82dc47e8efe13f30617f35f | HIGH | CVE-2026-46300: Linux Kernel Privilege Escalation via Shared Fragment Handling | 2026-11-03 |
| SHA256 | 9d87e6615c810907443ebd5e915f3b35099c3b5c6b6c684637138a7f8ec9cebc | HIGH | CVE-2026-46300: Linux Kernel Privilege Escalation via Shared Fragment Handling | 2026-11-03 |
| SHA256 | 9d7cd4948a1fcbaeadc425752fce9a933bd6fc41eeede030dffd7b99b3bc51d5 | HIGH | CVE-2026-46300: Linux Kernel Privilege Escalation via Shared Fragment Handling | 2026-11-03 |
| IP | 160.191.242.92 | HIGH | CVE-2026-46300: Linux Kernel Privilege Escalation via Shared Fragment Handling | 2026-11-03 |
| Domain | bins.sh | HIGH | CVE-2026-46300: Linux Kernel Privilege Escalation via Shared Fragment Handling | 2026-11-03 |
| Domain | deepveindrilling.com | CRITICAL | CVE-2026-48356: Adobe Commerce Unrestricted File Upload Leading to RCE | 2026-11-03 |
| URL | https://fedi.katze.sh/@elise/117479383739450605 | HIGH | CVE-2026-109619: PHP Stale Internal Request-State RCE Vulnerability | 2026-11-03 |
| URL | https://fedi.katze.sh/@elise/117478655339557825 | HIGH | CVE-2026-109619: PHP Stale Internal Request-State RCE Vulnerability | 2026-11-03 |
| SHA256 | 0c5486f06620e26e316f4b33f318b0d646d5e1133789331aa2fed012360d1486 | HIGH | CVE-2026-109619: PHP Stale Internal Request-State RCE Vulnerability | 2026-11-03 |
| SHA256 | 43898a0a53bbd25d31ad9f5018ed3182be98a66109b22c9cab545a9fc447992a | HIGH | CVE-2026-109619: PHP Stale Internal Request-State RCE Vulnerability | 2026-11-03 |
| SHA256 | 7bc41ed79a9ae909927a9e40701736460a8cb70fca16ce1510e58677aca764b6 | HIGH | CVE-2026-109619: PHP Stale Internal Request-State RCE Vulnerability | 2026-11-03 |
| IP | 103.216.220.92 | HIGH | CVE-2026-109619: PHP Stale Internal Request-State RCE Vulnerability | 2026-11-03 |
| IP | 31.223.184.166 | HIGH | CVE-2026-109619: PHP Stale Internal Request-State RCE Vulnerability | 2026-11-03 |
| IP | 37.19.200.5 | HIGH | CVE-2026-109619: PHP Stale Internal Request-State RCE Vulnerability | 2026-11-03 |
| IP | 134.209.159.64 | HIGH | CVE-2026-109619: PHP Stale Internal Request-State RCE Vulnerability | 2026-11-03 |
| IP | 103.114.163.188 | HIGH | CVE-2026-109619: PHP Stale Internal Request-State RCE Vulnerability | 2026-11-03 |
| IP | 95.217.98.37 | HIGH | CVE-2026-109619: PHP Stale Internal Request-State RCE Vulnerability | 2026-11-03 |
| IP | 92.118.112.100 | HIGH | CVE-2026-109619: PHP Stale Internal Request-State RCE Vulnerability | 2026-11-03 |
| IP | 85.11.167.243 | HIGH | CVE-2026-109619: PHP Stale Internal Request-State RCE Vulnerability | 2026-11-03 |
| IP | 45.198.224.169 | HIGH | CVE-2026-109619: PHP Stale Internal Request-State RCE Vulnerability | 2026-11-03 |
| IP | 109.71.252.97 | HIGH | CVE-2026-109619: PHP Stale Internal Request-State RCE Vulnerability | 2026-11-03 |
| IP | 221.14.159.134 | HIGH | CVE-2026-109619: PHP Stale Internal Request-State RCE Vulnerability | 2026-11-03 |
| IP | 91.90.123.25 | HIGH | CVE-2026-109619: PHP Stale Internal Request-State RCE Vulnerability | 2026-11-03 |
| SHA256 | 150ae88f0999032e2a6113501d6082f54a3ed98d02427b21a96e773a27d7bf16 | HIGH | CVE-2026-109619: PHP Stale Internal Request-State RCE Vulnerability | 2026-11-03 |
| SHA256 | 40caf199ca1ebe056a74427f8e9db06c66899e33ae09c0ec2769ec70bf6dd8e7 | HIGH | CVE-2026-109619: PHP Stale Internal Request-State RCE Vulnerability | 2026-11-03 |
| SHA256 | 27d926a6708d6769d97d065e7a5a860ab496eab272c03d1cebc55ec71b954fa2 | HIGH | CVE-2026-109619: PHP Stale Internal Request-State RCE Vulnerability | 2026-11-03 |
| SHA256 | 1485e14e0f62bc94664eec341cabd275dad7d30b1d496c40ec340c9a0d9f0ba8 | HIGH | CVE-2026-109619: PHP Stale Internal Request-State RCE Vulnerability | 2026-11-03 |
| SHA256 | 0c5486f06620e26e316f4b33f318b0d646d5e1133789331aa2fed012360d1486 | CRITICAL | CVE-2026-109618: PHP Memory Corruption Leads to Unauthenticated RCE | 2026-11-03 |
| SHA256 | 43898a0a53bbd25d31ad9f5018ed3182be98a66109b22c9cab545a9fc447992a | CRITICAL | CVE-2026-109618: PHP Memory Corruption Leads to Unauthenticated RCE | 2026-11-03 |
| SHA256 | 7bc41ed79a9ae909927a9e40701736460a8cb70fca16ce1510e58677aca764b6 | CRITICAL | CVE-2026-109618: PHP Memory Corruption Leads to Unauthenticated RCE | 2026-11-03 |
| IP | 103.216.220.92 | CRITICAL | CVE-2026-109618: PHP Memory Corruption Leads to Unauthenticated RCE | 2026-11-03 |
| IP | 31.223.184.166 | CRITICAL | CVE-2026-109618: PHP Memory Corruption Leads to Unauthenticated RCE | 2026-11-03 |
| IP | 37.19.200.5 | CRITICAL | CVE-2026-109618: PHP Memory Corruption Leads to Unauthenticated RCE | 2026-11-03 |
| IP | 134.209.159.64 | CRITICAL | CVE-2026-109618: PHP Memory Corruption Leads to Unauthenticated RCE | 2026-11-03 |
| IP | 103.114.163.188 | CRITICAL | CVE-2026-109618: PHP Memory Corruption Leads to Unauthenticated RCE | 2026-11-03 |
| IP | 95.217.98.37 | CRITICAL | CVE-2026-109618: PHP Memory Corruption Leads to Unauthenticated RCE | 2026-11-03 |
| IP | 92.118.112.100 | CRITICAL | CVE-2026-109618: PHP Memory Corruption Leads to Unauthenticated RCE | 2026-11-03 |
| IP | 85.11.167.243 | CRITICAL | CVE-2026-109618: PHP Memory Corruption Leads to Unauthenticated RCE | 2026-11-03 |
| IP | 45.198.224.169 | CRITICAL | CVE-2026-109618: PHP Memory Corruption Leads to Unauthenticated RCE | 2026-11-03 |
| IP | 109.71.252.97 | CRITICAL | CVE-2026-109618: PHP Memory Corruption Leads to Unauthenticated RCE | 2026-11-03 |
| IP | 221.14.159.134 | CRITICAL | CVE-2026-109618: PHP Memory Corruption Leads to Unauthenticated RCE | 2026-11-03 |
| IP | 91.90.123.25 | CRITICAL | CVE-2026-109618: PHP Memory Corruption Leads to Unauthenticated RCE | 2026-11-03 |
| SHA256 | 150ae88f0999032e2a6113501d6082f54a3ed98d02427b21a96e773a27d7bf16 | CRITICAL | CVE-2026-109618: PHP Memory Corruption Leads to Unauthenticated RCE | 2026-11-03 |
| SHA256 | 40caf199ca1ebe056a74427f8e9db06c66899e33ae09c0ec2769ec70bf6dd8e7 | CRITICAL | CVE-2026-109618: PHP Memory Corruption Leads to Unauthenticated RCE | 2026-11-03 |
| SHA256 | 27d926a6708d6769d97d065e7a5a860ab496eab272c03d1cebc55ec71b954fa2 | CRITICAL | CVE-2026-109618: PHP Memory Corruption Leads to Unauthenticated RCE | 2026-11-03 |
| SHA256 | 1485e14e0f62bc94664eec341cabd275dad7d30b1d496c40ec340c9a0d9f0ba8 | CRITICAL | CVE-2026-109618: PHP Memory Corruption Leads to Unauthenticated RCE | 2026-11-03 |
| URL | https://217.60.102.5/sh | CRITICAL | CVE-2026-109618: PHP Memory Corruption Leads to Unauthenticated RCE | 2026-11-03 |
| IP | 217.60.102.5 | CRITICAL | CVE-2026-109618: PHP Memory Corruption Leads to Unauthenticated RCE | 2026-11-03 |
| URL | https://217.60.103.56/sh | CRITICAL | CVE-2026-109618: PHP Memory Corruption Leads to Unauthenticated RCE | 2026-11-03 |
| Domain | p.2137gang.pl | CRITICAL | CVE-2026-109618: PHP Memory Corruption Leads to Unauthenticated RCE | 2026-11-03 |
| Domain | p.2137gang.st | CRITICAL | CVE-2026-109618: PHP Memory Corruption Leads to Unauthenticated RCE | 2026-11-03 |
| Domain | p.2137gang.store | CRITICAL | CVE-2026-109618: PHP Memory Corruption Leads to Unauthenticated RCE | 2026-11-03 |
| Domain | p.2137gang.shop | CRITICAL | CVE-2026-109618: PHP Memory Corruption Leads to Unauthenticated RCE | 2026-11-03 |
| Domain | p.2137gang.net | CRITICAL | CVE-2026-109618: PHP Memory Corruption Leads to Unauthenticated RCE | 2026-11-03 |
| Domain | proxy.identities.network | CRITICAL | CVE-2026-109618: PHP Memory Corruption Leads to Unauthenticated RCE | 2026-11-03 |
| Domain | proxies.identities.network | CRITICAL | CVE-2026-109618: PHP Memory Corruption Leads to Unauthenticated RCE | 2026-11-03 |
| IP | 130.12.180.51 | CRITICAL | CVE-2026-109618: PHP Memory Corruption Leads to Unauthenticated RCE | 2026-11-03 |
| Domain | proxy.insanitycpp.cx | CRITICAL | CVE-2026-109618: PHP Memory Corruption Leads to Unauthenticated RCE | 2026-11-03 |
| Domain | proxy.insanecppdev.com | CRITICAL | CVE-2026-109618: PHP Memory Corruption Leads to Unauthenticated RCE | 2026-11-03 |
| URL | http://92.118.112.100/nfs | CRITICAL | CVE-2026-109618: PHP Memory Corruption Leads to Unauthenticated RCE | 2026-11-03 |
| URL | http://92.118.112.100/s | CRITICAL | CVE-2026-109618: PHP Memory Corruption Leads to Unauthenticated RCE | 2026-11-03 |
| Domain | thunder.godofthunder.st | CRITICAL | CVE-2026-109618: PHP Memory Corruption Leads to Unauthenticated RCE | 2026-11-03 |
| URL | http://hackattackkaboom.botlesscucks.st/x86_64 | CRITICAL | CVE-2026-109618: PHP Memory Corruption Leads to Unauthenticated RCE | 2026-11-03 |
| IP | 134.199.154.64 | CRITICAL | CVE-2026-109618: PHP Memory Corruption Leads to Unauthenticated RCE | 2026-11-03 |
| IP | 74.82.197.86 | CRITICAL | CVE-2026-114625: Critical SQL Injection in Arista VeloCloud Orchestrator | 2026-11-03 |
| IP | 38.54.50.151 | CRITICAL | CVE-2026-114625: Critical SQL Injection in Arista VeloCloud Orchestrator | 2026-11-03 |
| IP | 103.194.186.118 | CRITICAL | CVE-2026-110447: Collabora Online Built-in CODE Server OS Command Injection | 2026-11-03 |
| URL | http://212.83.185.19/footerd.png | CRITICAL | CVE-2026-110447: Collabora Online Built-in CODE Server OS Command Injection | 2026-11-03 |
| URL | http://212.83.185.19/bottom-xe.png | CRITICAL | CVE-2026-110447: Collabora Online Built-in CODE Server OS Command Injection | 2026-11-03 |
| IP | 212.83.185.19 | CRITICAL | CVE-2026-110447: Collabora Online Built-in CODE Server OS Command Injection | 2026-11-03 |
| URL | http://cqzbr8a4.requestrepo.com | CRITICAL | CVE-2026-110447: Collabora Online Built-in CODE Server OS Command Injection | 2026-11-03 |
| SHA256 | 9aade612521dab5600f59b0660e19fb8392a42570408673e824f3bbd2532c85b | CRITICAL | CVE-2026-110447: Collabora Online Built-in CODE Server OS Command Injection | 2026-11-03 |
| SHA256 | 19cd1fe4e501fbdf6e52a7249a7bd375ea3039feed596f56691fb7f353acc23f | CRITICAL | CVE-2026-110447: Collabora Online Built-in CODE Server OS Command Injection | 2026-11-03 |
| SHA256 | e15d2363b9e4552250f230c62188cb299ff2570c9ba9589fbc3e190df84768ba | CRITICAL | CVE-2026-110447: Collabora Online Built-in CODE Server OS Command Injection | 2026-11-03 |
| SHA256 | c5bd9b66d5535c2dffa253cb6dd665d20208db58793fd176d4773093546f50df | CRITICAL | CVE-2026-110447: Collabora Online Built-in CODE Server OS Command Injection | 2026-11-03 |
| SHA256 | 2a6e2516b103c2f313d280e2e5954db9111515e401e603ebb6d4b47a65b086fb | CRITICAL | CVE-2026-110447: Collabora Online Built-in CODE Server OS Command Injection | 2026-11-03 |
| SHA256 | 4230d003e25b12be26130c9d941ef0b809dc7da2a25ecbf8d15a0c369730ebd0 | CRITICAL | CVE-2026-110447: Collabora Online Built-in CODE Server OS Command Injection | 2026-11-03 |
| SHA256 | 5220cce8158699825c206529746ad1cbb20d930eff244017f8c3f913b83a3d86 | CRITICAL | CVE-2026-110447: Collabora Online Built-in CODE Server OS Command Injection | 2026-11-03 |
| IP | 96.62.218.59 | MEDIUM | CVE-2026-110936: Siemens Software Center DLL Side-Loading Vulnerability Actively Exploited | 2026-11-03 |
| Domain | wizardexpensive.com | MEDIUM | CVE-2026-110936: Siemens Software Center DLL Side-Loading Vulnerability Actively Exploited | 2026-11-03 |
| IP | 2.27.248.127 | MEDIUM | CVE-2026-110936: Siemens Software Center DLL Side-Loading Vulnerability Actively Exploited | 2026-11-03 |
| SHA256 | f4d7c5321bb0d1bda439304a753bcf9b467b98ca53c7e9493b9c2c3451092e4a | MEDIUM | CVE-2026-110936: Siemens Software Center DLL Side-Loading Vulnerability Actively Exploited | 2026-11-03 |
| SHA256 | 3fdcc7d7d049a89711fb31fb236940a1c5a09d899143ffd20c3c41fb1f2cf491 | MEDIUM | CVE-2026-110936: Siemens Software Center DLL Side-Loading Vulnerability Actively Exploited | 2026-11-03 |
| IP | 45.194.92.222 | MEDIUM | CVE-2026-96652: Plex Media Server SSRF Vulnerability Exploited for Cryptomining | 2026-11-03 |
| Domain | 127.0.0.1.45-194-92-222.sslip.io | MEDIUM | CVE-2026-96652: Plex Media Server SSRF Vulnerability Exploited for Cryptomining | 2026-11-03 |
| IP | 91.92.40.202 | MEDIUM | CVE-2026-96652: Plex Media Server SSRF Vulnerability Exploited for Cryptomining | 2026-11-03 |
| IP | 176.65.139.228 | MEDIUM | CVE-2026-96652: Plex Media Server SSRF Vulnerability Exploited for Cryptomining | 2026-11-03 |
| IP | 217.60.194.116 | MEDIUM | CVE-2026-96652: Plex Media Server SSRF Vulnerability Exploited for Cryptomining | 2026-11-03 |
| SHA256 | 5712ef510481f15fe8b18fdd10b73026d57cb3d9d151878a692358b99a464441 | MEDIUM | CVE-2026-96652: Plex Media Server SSRF Vulnerability Exploited for Cryptomining | 2026-11-03 |
| SHA256 | 68938fb428f2bcfef4ede62f7b29cd0f15f37ed59e94462c099f2ca64e36baa7 | MEDIUM | CVE-2026-96652: Plex Media Server SSRF Vulnerability Exploited for Cryptomining | 2026-11-03 |
| SHA256 | b20f39fc00d242e706b6c30367ad811c676e0575050a4ec2f30104b696944b49 | MEDIUM | CVE-2026-96652: Plex Media Server SSRF Vulnerability Exploited for Cryptomining | 2026-11-03 |
| SHA256 | e546b10aee5edc754da4f9b0baace00392257121911f630145078eafad1e6bd9 | MEDIUM | CVE-2026-96652: Plex Media Server SSRF Vulnerability Exploited for Cryptomining | 2026-11-03 |
| SHA256 | 2d3c618b21a7e2f8bcd735da188e44a7609ff3f204832dd0781cd09e4388c9db | MEDIUM | CVE-2026-96652: Plex Media Server SSRF Vulnerability Exploited for Cryptomining | 2026-11-03 |
| Domain | proxystream.st | MEDIUM | CVE-2026-96652: Plex Media Server SSRF Vulnerability Exploited for Cryptomining | 2026-11-03 |
| XMRig | MEDIUM | CVE-2026-96655: Plex Media Server SSRF Vulnerability Exploited for Cryptomining | 2026-11-03 |
| myawesomeproxy | MEDIUM | CVE-2026-96655: Plex Media Server SSRF Vulnerability Exploited for Cryptomining | 2026-11-03 |
| URL | https://zmain.info/blog/plex2shell | MEDIUM | CVE-2026-96655: Plex Media Server SSRF Vulnerability Exploited for Cryptomining | 2026-11-03 |
| IP | 45.194.92.222 | MEDIUM | CVE-2026-96655: Plex Media Server SSRF Vulnerability Exploited for Cryptomining | 2026-11-03 |
| Domain | 127.0.0.1.45-194-92-222.sslip.io | MEDIUM | CVE-2026-96655: Plex Media Server SSRF Vulnerability Exploited for Cryptomining | 2026-11-03 |
| IP | 91.92.40.202 | MEDIUM | CVE-2026-96655: Plex Media Server SSRF Vulnerability Exploited for Cryptomining | 2026-11-03 |
| IP | 176.65.139.228 | MEDIUM | CVE-2026-96655: Plex Media Server SSRF Vulnerability Exploited for Cryptomining | 2026-11-03 |
| IP | 217.60.194.116 | MEDIUM | CVE-2026-96655: Plex Media Server SSRF Vulnerability Exploited for Cryptomining | 2026-11-03 |
| SHA256 | 5712ef510481f15fe8b18fdd10b73026d57cb3d9d151878a692358b99a464441 | MEDIUM | CVE-2026-96655: Plex Media Server SSRF Vulnerability Exploited for Cryptomining | 2026-11-03 |
| SHA256 | 68938fb428f2bcfef4ede62f7b29cd0f15f37ed59e94462c099f2ca64e36baa7 | MEDIUM | CVE-2026-96655: Plex Media Server SSRF Vulnerability Exploited for Cryptomining | 2026-11-03 |
| SHA256 | b20f39fc00d242e706b6c30367ad811c676e0575050a4ec2f30104b696944b49 | MEDIUM | CVE-2026-96655: Plex Media Server SSRF Vulnerability Exploited for Cryptomining | 2026-11-03 |
| SHA256 | e546b10aee5edc754da4f9b0baace00392257121911f630145078eafad1e6bd9 | MEDIUM | CVE-2026-96655: Plex Media Server SSRF Vulnerability Exploited for Cryptomining | 2026-11-03 |
| SHA256 | 2d3c618b21a7e2f8bcd735da188e44a7609ff3f204832dd0781cd09e4388c9db | MEDIUM | CVE-2026-96655: Plex Media Server SSRF Vulnerability Exploited for Cryptomining | 2026-11-03 |
| Domain | proxystream.st | MEDIUM | CVE-2026-96655: Plex Media Server SSRF Vulnerability Exploited for Cryptomining | 2026-11-03 |
| Domain | sslip.io | MEDIUM | CVE-2026-96654: Plex Media Server URI Scheme Neutralization Vulnerability Exploited for Cryptomining | 2026-11-03 |
| Email | security@plex.tv | MEDIUM | CVE-2026-96654: Plex Media Server URI Scheme Neutralization Vulnerability Exploited for Cryptomining | 2026-11-03 |
| IP | 45.194.92.222 | MEDIUM | CVE-2026-96654: Plex Media Server URI Scheme Neutralization Vulnerability Exploited for Cryptomining | 2026-11-03 |
| Domain | 127.0.0.1.45-194-92-222.sslip.io | MEDIUM | CVE-2026-96654: Plex Media Server URI Scheme Neutralization Vulnerability Exploited for Cryptomining | 2026-11-03 |
| IP | 91.92.40.202 | MEDIUM | CVE-2026-96654: Plex Media Server URI Scheme Neutralization Vulnerability Exploited for Cryptomining | 2026-11-03 |
| IP | 176.65.139.228 | MEDIUM | CVE-2026-96654: Plex Media Server URI Scheme Neutralization Vulnerability Exploited for Cryptomining | 2026-11-03 |
| IP | 217.60.194.116 | MEDIUM | CVE-2026-96654: Plex Media Server URI Scheme Neutralization Vulnerability Exploited for Cryptomining | 2026-11-03 |
| SHA256 | 5712ef510481f15fe8b18fdd10b73026d57cb3d9d151878a692358b99a464441 | MEDIUM | CVE-2026-96654: Plex Media Server URI Scheme Neutralization Vulnerability Exploited for Cryptomining | 2026-11-03 |
| SHA256 | 68938fb428f2bcfef4ede62f7b29cd0f15f37ed59e94462c099f2ca64e36baa7 | MEDIUM | CVE-2026-96654: Plex Media Server URI Scheme Neutralization Vulnerability Exploited for Cryptomining | 2026-11-03 |
| SHA256 | b20f39fc00d242e706b6c30367ad811c676e0575050a4ec2f30104b696944b49 | MEDIUM | CVE-2026-96654: Plex Media Server URI Scheme Neutralization Vulnerability Exploited for Cryptomining | 2026-11-03 |
| SHA256 | e546b10aee5edc754da4f9b0baace00392257121911f630145078eafad1e6bd9 | MEDIUM | CVE-2026-96654: Plex Media Server URI Scheme Neutralization Vulnerability Exploited for Cryptomining | 2026-11-03 |
| SHA256 | 2d3c618b21a7e2f8bcd735da188e44a7609ff3f204832dd0781cd09e4388c9db | MEDIUM | CVE-2026-96654: Plex Media Server URI Scheme Neutralization Vulnerability Exploited for Cryptomining | 2026-11-03 |
| Domain | proxystream.st | MEDIUM | CVE-2026-96654: Plex Media Server URI Scheme Neutralization Vulnerability Exploited for Cryptomining | 2026-11-03 |
| URL | https://zmain.info/blog/plex2shell | HIGH | CVE-2026-96656: Plex Media Server Arbitrary File Write Vulnerability Exploited In-The-Wild | 2026-11-03 |
| IP | 45.194.92.222 | HIGH | CVE-2026-96656: Plex Media Server Arbitrary File Write Vulnerability Exploited In-The-Wild | 2026-11-03 |
| Domain | 127.0.0.1.45-194-92-222.sslip.io | HIGH | CVE-2026-96656: Plex Media Server Arbitrary File Write Vulnerability Exploited In-The-Wild | 2026-11-03 |
| IP | 91.92.40.202 | HIGH | CVE-2026-96656: Plex Media Server Arbitrary File Write Vulnerability Exploited In-The-Wild | 2026-11-03 |
| IP | 176.65.139.228 | HIGH | CVE-2026-96656: Plex Media Server Arbitrary File Write Vulnerability Exploited In-The-Wild | 2026-11-03 |
| IP | 217.60.194.116 | HIGH | CVE-2026-96656: Plex Media Server Arbitrary File Write Vulnerability Exploited In-The-Wild | 2026-11-03 |
| SHA256 | 5712ef510481f15fe8b18fdd10b73026d57cb3d9d151878a692358b99a464441 | HIGH | CVE-2026-96656: Plex Media Server Arbitrary File Write Vulnerability Exploited In-The-Wild | 2026-11-03 |
| SHA256 | 68938fb428f2bcfef4ede62f7b29cd0f15f37ed59e94462c099f2ca64e36baa7 | HIGH | CVE-2026-96656: Plex Media Server Arbitrary File Write Vulnerability Exploited In-The-Wild | 2026-11-03 |
| SHA256 | b20f39fc00d242e706b6c30367ad811c676e0575050a4ec2f30104b696944b49 | HIGH | CVE-2026-96656: Plex Media Server Arbitrary File Write Vulnerability Exploited In-The-Wild | 2026-11-03 |
| SHA256 | e546b10aee5edc754da4f9b0baace00392257121911f630145078eafad1e6bd9 | HIGH | CVE-2026-96656: Plex Media Server Arbitrary File Write Vulnerability Exploited In-The-Wild | 2026-11-03 |
| SHA256 | 2d3c618b21a7e2f8bcd735da188e44a7609ff3f204832dd0781cd09e4388c9db | HIGH | CVE-2026-96656: Plex Media Server Arbitrary File Write Vulnerability Exploited In-The-Wild | 2026-11-03 |
| Domain | proxystream.st | HIGH | CVE-2026-96656: Plex Media Server Arbitrary File Write Vulnerability Exploited In-The-Wild | 2026-11-03 |
| Domain | www.autoccb.tech | HIGH | CVE-2026-96656: Plex Media Server Arbitrary File Write Vulnerability Exploited In-The-Wild | 2026-11-03 |
| Domain | autoccb.tech | HIGH | CVE-2026-96656: Plex Media Server Arbitrary File Write Vulnerability Exploited In-The-Wild | 2026-11-03 |
| URL | https://www.autoccb.tech/api/v1/poll | HIGH | CVE-2026-96656: Plex Media Server Arbitrary File Write Vulnerability Exploited In-The-Wild | 2026-11-03 |
| URL | https://www.autoccb.tech/api/v1/result | HIGH | CVE-2026-96656: Plex Media Server Arbitrary File Write Vulnerability Exploited In-The-Wild | 2026-11-03 |
| SHA256 | cababb6448ee3f2a274f516dc6b0fdc9f47d084a84d7bd164546c9c4b1755d44 | HIGH | CVE-2026-96656: Plex Media Server Arbitrary File Write Vulnerability Exploited In-The-Wild | 2026-11-03 |
| IP | 202.78.167.55 | HIGH | CVE-2026-96656: Plex Media Server Arbitrary File Write Vulnerability Exploited In-The-Wild | 2026-11-03 |
| SHA256 | f083b3647e50fb548c2b97887e51927bc62b429aaa7c4828e316bd5ef6503453 | HIGH | CVE-2026-96656: Plex Media Server Arbitrary File Write Vulnerability Exploited In-The-Wild | 2026-11-03 |
| SHA256 | 6915f57c96c880803863d30eefaa5e3fe3923e11c948cb6747c68478d2e6cf40 | HIGH | CVE-2026-96656: Plex Media Server Arbitrary File Write Vulnerability Exploited In-The-Wild | 2026-11-03 |
| SHA256 | 50e93e8d8c26bd95d0ba91ba9b7c5c15532050866f52c3aef04f9773b7418767 | HIGH | CVE-2026-96656: Plex Media Server Arbitrary File Write Vulnerability Exploited In-The-Wild | 2026-11-03 |
| SHA256 | f599491cce46b1d94c762eff392458ae015e7163620b07ad7ceaa16708b1bf4f | HIGH | CVE-2026-96656: Plex Media Server Arbitrary File Write Vulnerability Exploited In-The-Wild | 2026-11-03 |
| SHA256 | a580786ff7336e916e92bb79db96d5d6f48119cd3b0b4e45211b47e298be5380 | HIGH | CVE-2026-96656: Plex Media Server Arbitrary File Write Vulnerability Exploited In-The-Wild | 2026-11-03 |
| Domain | ota.proxystream.st | HIGH | CVE-2026-96656: Plex Media Server Arbitrary File Write Vulnerability Exploited In-The-Wild | 2026-11-03 |
| URL | http://217.60.194.116/docker | HIGH | CVE-2026-96656: Plex Media Server Arbitrary File Write Vulnerability Exploited In-The-Wild | 2026-11-03 |
| SHA256 | a9a309154493193c70bf6f805fe70e1bc4e9564e2f0e20cd1600c72587c7e65f | HIGH | CVE-2026-96656: Plex Media Server Arbitrary File Write Vulnerability Exploited In-The-Wild | 2026-11-03 |
| IP | 77.90.185.205 | HIGH | CVE-2026-96656: Plex Media Server Arbitrary File Write Vulnerability Exploited In-The-Wild | 2026-11-03 |
| SAWFLY | CRITICAL | CVE-2026-102764: Critical BeyondTrust Remote Support Authentication Bypass | 2026-10-17 |
| BARECLAW | CRITICAL | CVE-2026-102764: Critical BeyondTrust Remote Support Authentication Bypass | 2026-10-17 |
| ARMORY CASTLE | CRITICAL | CVE-2026-102764: Critical BeyondTrust Remote Support Authentication Bypass | 2026-10-17 |
| webshell | CRITICAL | CVE-2026-102764: Critical BeyondTrust Remote Support Authentication Bypass | 2026-10-17 |
| backdoor | CRITICAL | CVE-2026-102764: Critical BeyondTrust Remote Support Authentication Bypass | 2026-10-17 |
| SHA256 | dc14e215269a93fdbc4c1a80b984c23faf7af0911c6dbb85309796a6f2ae95fb | CRITICAL | CVE-2026-102764: Critical BeyondTrust Remote Support Authentication Bypass | 2026-10-17 |
| SHA256 | 1f19b9a27d79c11bda00a1e8faf74a7fdd683d38ccef1b60df2fd0307e3aa462 | CRITICAL | CVE-2026-102764: Critical BeyondTrust Remote Support Authentication Bypass | 2026-10-17 |
| SHA256 | 05f69ae6b2b89c1c4dcf836bff032232f11bf0109f2b498e2345045d06139034 | HIGH | CVE-2026-105133: AhsayCBS Improper Authentication Vulnerability Exploited | 2026-10-17 |
| SHA256 | 4dcb0202fe8b2d4d7b183764e38184cd6ed50132786cc7e7d1f7f4bce1dd6f3d | HIGH | CVE-2026-105133: AhsayCBS Improper Authentication Vulnerability Exploited | 2026-10-17 |
| SHA256 | 481728a7c9c4c02be07051d9c1958d902ea6397ebb8952ab83944818e3d25d21 | HIGH | CVE-2026-105133: AhsayCBS Improper Authentication Vulnerability Exploited | 2026-10-17 |
| URL | http://imagefiles-backup.oss-ap-southeast-7.aliyuncs.com | HIGH | CVE-2026-105133: AhsayCBS Improper Authentication Vulnerability Exploited | 2026-10-17 |
| Domain | imagefiles-backup.oss-ap-southeast-7.aliyuncs.com | HIGH | CVE-2026-105133: AhsayCBS Improper Authentication Vulnerability Exploited | 2026-10-17 |
| IP | 51.195.127.124 | HIGH | CVE-2026-105133: AhsayCBS Improper Authentication Vulnerability Exploited | 2026-10-17 |
| Domain | xmr.kryptex.network | HIGH | CVE-2026-105133: AhsayCBS Improper Authentication Vulnerability Exploited | 2026-10-17 |
| SHA256 | 05f69ae6b2b89c1c4dcf836bff032232f11bf0109f2b498e2345045d06139034 | CRITICAL | CVE-2026-105134: AhsayCBS Command Injection Vulnerability Actively Exploited | 2026-10-17 |
| SHA256 | 4dcb0202fe8b2d4d7b183764e38184cd6ed50132786cc7e7d1f7f4bce1dd6f3d | CRITICAL | CVE-2026-105134: AhsayCBS Command Injection Vulnerability Actively Exploited | 2026-10-17 |
| SHA256 | 481728a7c9c4c02be07051d9c1958d902ea6397ebb8952ab83944818e3d25d21 | CRITICAL | CVE-2026-105134: AhsayCBS Command Injection Vulnerability Actively Exploited | 2026-10-17 |
| URL | http://imagefiles-backup.oss-ap-southeast-7.aliyuncs.com | CRITICAL | CVE-2026-105134: AhsayCBS Command Injection Vulnerability Actively Exploited | 2026-10-17 |
| Domain | imagefiles-backup.oss-ap-southeast-7.aliyuncs.com | CRITICAL | CVE-2026-105134: AhsayCBS Command Injection Vulnerability Actively Exploited | 2026-10-17 |
| IP | 51.195.127.124 | CRITICAL | CVE-2026-105134: AhsayCBS Command Injection Vulnerability Actively Exploited | 2026-10-17 |
| Domain | xmr.kryptex.network | CRITICAL | CVE-2026-105134: AhsayCBS Command Injection Vulnerability Actively Exploited | 2026-10-17 |
| IP | 176.65.148.184 | CRITICAL | CVE-2026-60004: Gitea Code Injection Vulnerability Actively Exploited | 2026-09-06 |
| IP | 92.246.139.83 | CRITICAL | CVE-2026-60004: Gitea Code Injection Vulnerability Actively Exploited | 2026-09-06 |
| Domain | abcdefghijklmnopqrst.net | CRITICAL | CVE-2026-60004: Gitea Code Injection Vulnerability Actively Exploited | 2026-09-06 |
| URL | http://92.246.139.83/3 | CRITICAL | CVE-2026-60004: Gitea Code Injection Vulnerability Actively Exploited | 2026-09-06 |
| URL | http://92.246.139.83/2 | CRITICAL | CVE-2026-60004: Gitea Code Injection Vulnerability Actively Exploited | 2026-09-06 |
| URL | http://92.246.139.83/1 | CRITICAL | CVE-2026-60004: Gitea Code Injection Vulnerability Actively Exploited | 2026-09-06 |
| URL | https://cta.edu.pe/wp-content/plugins/linux.bin | CRITICAL | CVE-2026-60004: Gitea Code Injection Vulnerability Actively Exploited | 2026-09-06 |
| URL | http://puschl.langhaar-schaeferhunde.com/plugins/linux.bin | CRITICAL | CVE-2026-60004: Gitea Code Injection Vulnerability Actively Exploited | 2026-09-06 |
| URL | https://casasmediterraneas.com/wp-content/plugins/linux.bin | CRITICAL | CVE-2026-60004: Gitea Code Injection Vulnerability Actively Exploited | 2026-09-06 |
| URL | https://www.mediocasavolponi.com/wp-content/plugins/linux.bin | CRITICAL | CVE-2026-60004: Gitea Code Injection Vulnerability Actively Exploited | 2026-09-06 |
| URL | https://cloud.calltop.com.br/apps/web/linux.bin | CRITICAL | CVE-2026-60004: Gitea Code Injection Vulnerability Actively Exploited | 2026-09-06 |
| SHA256 | 0b8e037d160bdb0b621c975c424f680b814bc438fd492ae376ff3140e209e480 | CRITICAL | CVE-2026-60004: Gitea Code Injection Vulnerability Actively Exploited | 2026-09-06 |
| SHA256 | 3928c5874249cc71b2d88e5c0c00989ac394238747bb7638897fc210531b4aab | CRITICAL | CVE-2026-60004: Gitea Code Injection Vulnerability Actively Exploited | 2026-09-06 |
| SHA256 | a5d9970129afd6e1874cbeafa08df65a3d3599862357ae48bdad211e0f47264a | CRITICAL | CVE-2026-60004: Gitea Code Injection Vulnerability Actively Exploited | 2026-09-06 |
| URL | http://0x1x2x3.top/ | CRITICAL | CVE-2026-60004: Gitea Code Injection Vulnerability Actively Exploited | 2026-09-06 |
| Domain | 0x1x2x3.top | CRITICAL | CVE-2026-60004: Gitea Code Injection Vulnerability Actively Exploited | 2026-09-06 |
| URL | http://cta.edu.pe/wp-content/plugins/linux.bin | CRITICAL | CVE-2026-60004: Gitea Code Injection Vulnerability Actively Exploited | 2026-09-06 |
| Domain | fix.unknower.win | CRITICAL | CVE-2026-60004: Gitea Code Injection Vulnerability Actively Exploited | 2026-09-06 |
| URL | http://176.65.148.250:6556/ok | CRITICAL | CVE-2026-60004: Gitea Code Injection Vulnerability Actively Exploited | 2026-09-06 |
| IP | 176.65.148.250 | CRITICAL | CVE-2026-60004: Gitea Code Injection Vulnerability Actively Exploited | 2026-09-06 |
| URL | http://fix.unknower.win/ | CRITICAL | CVE-2026-60004: Gitea Code Injection Vulnerability Actively Exploited | 2026-09-06 |
| URL | https://kworker.eth.limo/kworker/api | CRITICAL | CVE-2026-60004: Gitea Code Injection Vulnerability Actively Exploited | 2026-09-06 |
| Domain | kworker.eth.limo | CRITICAL | CVE-2026-60004: Gitea Code Injection Vulnerability Actively Exploited | 2026-09-06 |
| URL | https://kworker.eth.link/kworker/api | CRITICAL | CVE-2026-60004: Gitea Code Injection Vulnerability Actively Exploited | 2026-09-06 |
| IP | 167.179.119.120 | CRITICAL | CVE-2026-60004: Gitea Code Injection Vulnerability Actively Exploited | 2026-09-06 |
| Domain | kworker.eth.link | CRITICAL | CVE-2026-60004: Gitea Code Injection Vulnerability Actively Exploited | 2026-09-06 |
| IP | 216.98.10.60 | CRITICAL | CVE-2026-60004: Gitea Code Injection Vulnerability Actively Exploited | 2026-09-06 |
| IP | 34.70.205.211 | CRITICAL | CVE-2026-60004: Gitea Code Injection Vulnerability Actively Exploited | 2026-09-06 |
| IP | 2.26.99.68 | CRITICAL | CVE-2026-60004: Gitea Code Injection Vulnerability Actively Exploited | 2026-09-06 |
| IP | 95.85.237.149 | CRITICAL | CVE-2026-60004: Gitea Code Injection Vulnerability Actively Exploited | 2026-09-06 |
| IP | 193.41.68.194 | CRITICAL | CVE-2026-60004: Gitea Code Injection Vulnerability Actively Exploited | 2026-09-06 |
| IP | 45.150.109.151 | MEDIUM | CVE-2026-48710: Starlette HTTP Request/Response Smuggling Vulnerability | 2026-09-06 |
| IP | 135.125.10.56 | MEDIUM | CVE-2026-48710: Starlette HTTP Request/Response Smuggling Vulnerability | 2026-09-06 |
| IP | 172.232.38.92 | MEDIUM | CVE-2026-48710: Starlette HTTP Request/Response Smuggling Vulnerability | 2026-09-06 |
| Domain | 45.150.109.151.sslip.io | MEDIUM | CVE-2026-48710: Starlette HTTP Request/Response Smuggling Vulnerability | 2026-09-06 |
| Domain | auto.c3pool.org | MEDIUM | CVE-2026-48710: Starlette HTTP Request/Response Smuggling Vulnerability | 2026-09-06 |
| IP | 47.86.197.116 | MEDIUM | CVE-2026-48710: Starlette HTTP Request/Response Smuggling Vulnerability | 2026-09-06 |
| Domain | yosemite.jp | MEDIUM | CVE-2026-48710: Starlette HTTP Request/Response Smuggling Vulnerability | 2026-09-06 |
| Domain | gobygo.net | MEDIUM | CVE-2026-48710: Starlette HTTP Request/Response Smuggling Vulnerability | 2026-09-06 |
| Domain | oast.me | MEDIUM | CVE-2026-48710: Starlette HTTP Request/Response Smuggling Vulnerability | 2026-09-06 |
| Domain | oast.pro | MEDIUM | CVE-2026-48710: Starlette HTTP Request/Response Smuggling Vulnerability | 2026-09-06 |
| Domain | oast.fun | MEDIUM | CVE-2026-48710: Starlette HTTP Request/Response Smuggling Vulnerability | 2026-09-06 |
| IP | 194.213.18.133 | MEDIUM | CVE-2026-48710: Starlette HTTP Request/Response Smuggling Vulnerability | 2026-09-06 |
| SHA256 | f64b88e9318bdf23f2dd119a0ce1dd1bdb3c8cd2e0e1e23ba3ef2e19072b79cc | MEDIUM | CVE-2026-48710: Starlette HTTP Request/Response Smuggling Vulnerability | 2026-09-06 |
| SHA256 | 49fdcf32bfe837899a84e8938f0d07ae96ddd218a280a09eb60df8d64597bd8f | MEDIUM | CVE-2026-48710: Starlette HTTP Request/Response Smuggling Vulnerability | 2026-09-06 |
| SHA256 | 3af9f25a4d45bb4f1ec5627cdbc6703cf3b4be75a892162d299d80ddfb266f42 | MEDIUM | CVE-2026-48710: Starlette HTTP Request/Response Smuggling Vulnerability | 2026-09-06 |
| SHA256 | 3d24ac736635e0fa0c5c459c9e18ca09d1ec9a1751a4503130934395609bd7e0 | MEDIUM | CVE-2026-48710: Starlette HTTP Request/Response Smuggling Vulnerability | 2026-09-06 |
| IP | 151.241.99.207 | CRITICAL | CVE-2026-16232: Check Point SmartConsole Authentication Bypass Vulnerability | 2026-07-24 |
| IP | 151.241.99.233 | CRITICAL | CVE-2026-16232: Check Point SmartConsole Authentication Bypass Vulnerability | 2026-07-24 |
| IP | 158.62.198.182 | CRITICAL | CVE-2026-16232: Check Point SmartConsole Authentication Bypass Vulnerability | 2026-07-24 |
| IP | 192.142.10.99 | CRITICAL | CVE-2026-16232: Check Point SmartConsole Authentication Bypass Vulnerability | 2026-07-24 |
| IP | 139.28.37.250 | CRITICAL | CVE-2026-16232: Check Point SmartConsole Authentication Bypass Vulnerability | 2026-07-24 |
| MD5 | 7f74bb6ba185978134c318bc5f91d23c | CRITICAL | CVE-2026-25089: Fortinet FortiSandbox OS Command Injection Vulnerability | 2026-07-24 |
| SHA256 | 2758f4d71a2a2dfdefab81737c2d776b2a3dafe5844fdd2157e089a28447ca98 | CRITICAL | CVE-2026-25089: Fortinet FortiSandbox OS Command Injection Vulnerability | 2026-07-24 |
| SHA1 | 268a8420b791df46380ed9ad69905207e15d8a7c | CRITICAL | CVE-2026-25089: Fortinet FortiSandbox OS Command Injection Vulnerability | 2026-07-24 |
| SHA256 | 479ae5fd7274439ddfa27bc03298ebfdfc5ff17f6412acccf74d4dbd90d94218 | CRITICAL | CVE-2026-25089: Fortinet FortiSandbox OS Command Injection Vulnerability | 2026-07-24 |
| SHA256 | 874bcb1c3d050a5b5b333a2198f504fcb27927c2abdd43b07440188a380c52d5 | CRITICAL | CVE-2026-25089: Fortinet FortiSandbox OS Command Injection Vulnerability | 2026-07-24 |
| SHA256 | 38353f95fff270f4e3a9d7add8c64666020dd668ce66e15969a736ec48cadc59 | CRITICAL | CVE-2026-25089: Fortinet FortiSandbox OS Command Injection Vulnerability | 2026-07-24 |
| SHA256 | 4253dd1a4c0867b0be7732f75b2f630cebfb7fed94270e15fb3b12ae40546d01 | CRITICAL | CVE-2026-25089: Fortinet FortiSandbox OS Command Injection Vulnerability | 2026-07-24 |
| SHA256 | 9eaa577c8ba71646928c1c34c3145536b0498f65f26060a6ba00744bcef57644 | CRITICAL | CVE-2026-25089: Fortinet FortiSandbox OS Command Injection Vulnerability | 2026-07-24 |
| IP | 193.8.187.42 | CRITICAL | CVE-2026-25089: Fortinet FortiSandbox OS Command Injection Vulnerability | 2026-07-24 |
| IP | 85.11.187.8 | CRITICAL | CVE-2026-25089: Fortinet FortiSandbox OS Command Injection Vulnerability | 2026-07-24 |