Vulnerability & exploit intelligence CVE • EPSS • KEV • Exploit Evidence Prioritize what matters now. Know Before They Strike. https://xitter.cf/t.co/zbz8DJisKw
Joined June 2026
- Tweets1.4K
- Following37
- Followers435
- Likes438
Introducing ExploitGrid.
New vulnerabilities and exploits appear every day. The challenge isn't finding them. It's knowing what matters, what's being exploited, and what needs attention first.
We built ExploitGrid for that.
🧵 Here's what we offer:
ALT exploitgrid.net
➕ +857 more threats tracked today.
Explore the full threat feed and mitigation details on ExploitGrid.
🔗 exploitgrid.net
Disclaimer: Informational, defensive security monitoring only.
[EXPLOIT] CVE-2024-10441 [CRITICAL/PoC]
CVSS: 9.8 | Vendor: #Synology
cve-2024-10441-synology-rce
🔗 exploitgrid.net/exploits/ed9…
[EXPLOIT] CVE-2021-44228 [CRITICAL/PoC]
CVSS: 10 | Vendor: #ApacheSoftwareFoundation
log4shell-audit-4
🔗 exploitgrid.net/exploits/890…
[EXPLOIT] CVE-2020-25213 [CRITICAL/PoC]
CVSS: 10
CEV-2020-25213_wp-file-manger_exploit
🔗 exploitgrid.net/exploits/4d0…
[EXPLOIT] CVE-2026-83548 [CRITICAL/PoC]
CVSS: 10 | Vendor: #sonicwall
CVE-2026-83548
🔗 exploitgrid.net/exploits/1d3…
[EXPLOIT] CVE-2024-45409 [CRITICAL/PoC]
CVSS: 10 | Vendor: #SAMLToolkits
CVE-2024-45409
🔗 exploitgrid.net/exploits/6dc…
ExploitGrid Daily Digest
🚨 Top Exploits:
CVE-2024-45409 (CVSS: 10) SAML-Toolkits
CVE-2026-83548 (CVSS: 10) sonicwall
CVE-2020-25213 (CVSS: 10)
CVE-2021-44228 (CVSS: 10) Apache Softw...
CVE-2024-10441 (CVSS: 9.8) Synology
..🧵👇
➕ +857 more threats tracked today.
Explore the full threat feed and mitigation details on ExploitGrid.
🔗 exploitgrid.net
Disclaimer: Informational, defensive security monitoring only.
[CVE] CVE-2026-115188 [HIGH PRIORITY]
CVSS: 9.9
🔗 exploitgrid.net/cve/CVE-2026…
[CVE] CVE-2026-110720 [HIGH PRIORITY]
CVSS: 9.9 | Vendor: #HashiCorp
#Consul-k8s vulnerable to a cross-namespace authorization bypass in component ...
🔗 exploitgrid.net/cve/CVE-2026…
[CVE] CVE-2026-102649 [HIGH PRIORITY]
CVSS: 9.9 | Vendor: #padokteam
#Burrito: Unauthenticated webhooks trigger unauthorized Terraform plans when w...
🔗 exploitgrid.net/cve/CVE-2026…
[CVE] CVE-2026-116508 [HIGH PRIORITY]
CVSS: 10 | Vendor: #totolink
#TOTOLINK A950RG Device-Information CGI infostat.cgi sub_402340 stack-based ov...
🔗 exploitgrid.net/cve/CVE-2026…
[CVE] CVE-2026-115905 [HIGH PRIORITY]
CVSS: 10 | Vendor: #ziprs
#zip: Critical Parser Differential & Security Control Bypass via Dual-Header I...
🔗 exploitgrid.net/cve/CVE-2026…
ExploitGrid Daily Digest
🚨 Top CVEs:
CVE-2026-115905 (CVSS: 10) zip-rs
CVE-2026-116508 (CVSS: 10) totolink
CVE-2026-102649 (CVSS: 9.9) padok-team
CVE-2026-110720 (CVSS: 9.9) HashiCorp
CVE-2026-115188 (CVSS: 9.9)
..🧵👇
🚨 PHP2Shell update: Unit 42 retracted its link between the European agency attack and the exploit.
The agency ran a vulnerable PHP app, but initial access remains unconfirmed.
Attribution matters. A vulnerable system doesn't prove the exploit path.
🔎 exploitgrid.net
🚨 What happens when a Brotli decoder bug goes beyond a crash?
We reproduced the out-of-bounds write behind CVE-2026-111497 in Node.js and broke down the details in our latest research.
See how it works and why it matters.
🔎 exploitgrid.net/blogs/cve-20…
🚨 Linux KSMBD: the lower-severity flaw may be more urgent.
ZDI-CAN-33367 reportedly has a public root exploit confirmed on AlmaLinux, Debian and Ubuntu, with no merged patch or CVE.
Admins should review exposure and apply the stopgap.
🔎 exploitgrid.net
🚨 Tailscale SSH flaws could let a compromised, authorized device gain root on permitted servers.
This isn’t unauthenticated RCE. Researchers say the findings are lab-tested, with scope under review.
Review SSH policies and disable forwarding if unused.
🔎 exploitgrid.net
Fascinating how many of these rely on workspace policies (AGENTS.md) and harness-level configs rather than raw user prompts. Agentic AI safety is moving way beyond simple chat framing.