Vulnerability & exploit intelligence CVE • EPSS • KEV • Exploit Evidence Prioritize what matters now. Know Before They Strike. https://xitter.cf/t.co/zbz8DJisKw
Joined June 2026
- Tweets1.4K
- Following37
- Followers435
- Likes438
Pinned Tweet
Introducing ExploitGrid.
New vulnerabilities and exploits appear every day. The challenge isn't finding them. It's knowing what matters, what's being exploited, and what needs attention first.
We built ExploitGrid for that.
🧵 Here's what we offer:
ALT exploitgrid.net
ExploitGrid Daily Digest
🚨 Top Exploits:
CVE-2024-45409 (CVSS: 10) SAML-Toolkits
CVE-2026-83548 (CVSS: 10) sonicwall
CVE-2020-25213 (CVSS: 10)
CVE-2021-44228 (CVSS: 10) Apache Softw...
CVE-2024-10441 (CVSS: 9.8) Synology
..🧵👇
[EXPLOIT] CVE-2024-10441 [CRITICAL/PoC]
CVSS: 9.8 | Vendor: #Synology
cve-2024-10441-synology-rce
🔗 exploitgrid.net/exploits/ed9…
➕ +857 more threats tracked today.
Explore the full threat feed and mitigation details on ExploitGrid.
🔗 exploitgrid.net
Disclaimer: Informational, defensive security monitoring only.
ExploitGrid Daily Digest
🚨 Top CVEs:
CVE-2026-115905 (CVSS: 10) zip-rs
CVE-2026-116508 (CVSS: 10) totolink
CVE-2026-102649 (CVSS: 9.9) padok-team
CVE-2026-110720 (CVSS: 9.9) HashiCorp
CVE-2026-115188 (CVSS: 9.9)
..🧵👇
[CVE] CVE-2026-115188 [HIGH PRIORITY]
CVSS: 9.9
🔗 exploitgrid.net/cve/CVE-2026…
➕ +857 more threats tracked today.
Explore the full threat feed and mitigation details on ExploitGrid.
🔗 exploitgrid.net
Disclaimer: Informational, defensive security monitoring only.
🚨 PHP2Shell update: Unit 42 retracted its link between the European agency attack and the exploit.
The agency ran a vulnerable PHP app, but initial access remains unconfirmed.
Attribution matters. A vulnerable system doesn't prove the exploit path.
🔎 exploitgrid.net
🚨 What happens when a Brotli decoder bug goes beyond a crash?
We reproduced the out-of-bounds write behind CVE-2026-111497 in Node.js and broke down the details in our latest research.
See how it works and why it matters.
🔎 exploitgrid.net/blogs/cve-20…
🚨 Linux KSMBD: the lower-severity flaw may be more urgent.
ZDI-CAN-33367 reportedly has a public root exploit confirmed on AlmaLinux, Debian and Ubuntu, with no merged patch or CVE.
Admins should review exposure and apply the stopgap.
🔎 exploitgrid.net
🚨 Tailscale SSH flaws could let a compromised, authorized device gain root on permitted servers.
This isn’t unauthenticated RCE. Researchers say the findings are lab-tested, with scope under review.
Review SSH policies and disable forwarding if unused.
🔎 exploitgrid.net
🚨 Auth bypasses hit two popular open-source projects today: Snipe-IT via Google SSO and Parse Server via its auth adapter. vLLM also has an SSRF, and YOOtheme’s Joomla RCE now has a second public exploit.
Here’s what hit the feed 👇