Real-Time Vulnerability & Threat Intelligence Database

Track the latest CVEs, zero-days, KEV attacks in real time, and adversarial campaigns - before they hit your network.

Total Vulnerabilities

Total Vulnerabilities

CVEs with Exploits

CVEs with Exploits

Trending CVEs

Securin Zerodays

Securin Zerodays

KEV Coverage

From Frontline Research to Platform Intelligence

The Securin Research team is the driving force behind our platform's ability to preempt adversaries. By continuously monitoring the dark web, reverse-engineering new exploit tooling, and tracking adversary infrastructure, we transform raw signals into the curated, high-confidence intelligence that powers the platform.

50+

Elite Security Researchers

Hands-on offensive research team continuously identifying, analyzing, and disclosing novel vulnerabilities.

455

Discovered

Vulnerabilities uncovered by Securin Research across enterprise, open-source, and infrastructure software.

246

Triaged

Findings validated, enriched, and prioritized for platform intelligence and coordinated disclosure.

117

Published

Publicly disclosed advisories, CVEs, and research reports available to the security community.

Zero Day Advisories

Securin's offensive security team actively hunts zero-days in open-source and commercial software. As a DHS-sponsored CVE Numbering Authority, we coordinate responsible disclosure and publish full advisories after vendor remediation.

76

CVEs Published as a CNA

Authorized CVE Numbering Authority

38

Coordinated Disclosure

Responsible vendor coordination

47

Upcoming

Advisories pending publication

WinRAR / UnRAR RAR5 recovery-volume (.rev) out-of-bounds heap write in RecVolumes5::ReadHeader

KEVEXPLOITZERO DAY

Affected vendors:

Discovered on :

UltraVNC repeater integer overflow in win_log malloc leading to heap overflow

Affected vendors:

Discovered on :

UltraVNC vncauth.c uses time-seeded libc rand() to generate VNC authentication challenge bytes

Affected vendors:

Discovered on :

UltraVNC repeater wi_uudecode off-by-one in base64 decode boundary check

Affected vendors:

Discovered on :

UltraVNC vncWc2Mb calls wcslen() before validating that the wide string is NUL-terminated

Affected vendors:

Discovered on :

Securin Known Exploited Vulnerabilities

Top CVEs with the highest adversary attention right now.

Metabase SQL injection via password reset endpoint

KEVEXPLOITTRENDING

Affected vendors:

Discovered on :

Adobe Commerce | Incorrect Authorization (CWE-863)

KEVEXPLOITTRENDING

Affected vendors:

Discovered on :

Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service Vulnerability

KEVEXPLOITTRENDING

Affected vendors:

Discovered on :

Microsoft SharePoint Server Remote Code Execution Vulnerability

KEVEXPLOITTRENDING

Affected vendors:

Discovered on :

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

KEVEXPLOITTRENDING

Affected vendors:

Discovered on :

Recently Discovered

Latest vulnerabilities added to the Securin intelligence database.

Forminator Forms <= 1.56.1 - Unauthenticated Arbitrary File Upload via Forged Upload Field Configuration

Affected vendors:

Discovered on :

Quill Forms <= 5.7.1 - Unauthenticated Stored Cross-Site Scripting

Affected vendors:

Discovered on :

WPAdverts <= 2.3.2 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via classifieds-types REST Endpoint

Affected vendors:

greg winiarski+1

Discovered on :

Apache SkyWalking MCP: SSRF via set_skywalking_url Tool and GraphQL Expression Injection in MCP Server

Affected vendors:

apache software foundation

Discovered on :

Velociraptor Stored XSS in URL column types

Affected vendors:

Discovered on :

KEV Toxic Combo Attack Chains

Identified exploit chains combining multiple vulnerabilities for maximum impact.

CriticalAC-PROXYSHELL

ProxyShell: Pre-Auth to SYSTEM on Microsoft Exchange

Path confusion bypasses ACLs, PowerShell backend privilege escalation, then an arbitrary file write delivers a web shell, yielding full SYSTEM control of on-prem Exchange.

CVE-2021-34473

CVE-2021-34523

CVE-2021-31207

12 exploit pathsView Chain

CriticalAC-PROXYLOGON

ProxyLogon: SSRF + File Write = Unauthenticated RCE

A server-side request forgery lets an attacker impersonate Exchange, then a post-auth arbitrary file write turns into unauthenticated remote code execution against internet-facing servers.

CVE-2021-26855

CVE-2021-27065

6 exploit pathsView Chain

CriticalAC-IVANTI-2024

Ivanti Connect Secure: Auth Bypass + Command Injection

Path traversal bypasses authentication on the management interface; command injection then lets the now-'admin' attacker run arbitrary commands, unauthenticated RCE on a perimeter VPN.

CVE-2023-46805

CVE-2024-21887

4 exploit pathsView Chain

Unlock Deeper Threat Intelligence

Explore the full Securin vulnerability database. Get exploit chain analysis, advanced remediation guidance, and real-time threat feeds.