Global Network Activity Map
Real-time global network and scanning activity from open, public data sets. Updated periodically.
Sources: abuse.ch, SANS Internet Storm Center
- Net node
- server included in bothe.ch public lists of harmful servers. Network administrators usually block such addresses in a firewall.
- Scanning
- the address that the SANS ISC sensors have seen on a massive basis test the open ports of other computers.
- Point on map
- the country where the address is registered. The point is in the middle of the country, not in the exact location of the address, and the purpose of the data is unknown - these are global lists.
i Real-time network and scanning activity indicators from open, public data sets. Last update: -
European vulnerability database (ENISA EUVD)
ENISA's EU vulnerability database - critical and actively used vulnerabilities from European sources (CIRCL, CERT-EU, etc.) is complemented by the possibility of using EPSS.
Source: ENISA EUVD
- CVE
- unique Vulnerabilities and Exposure.
- CWE
- vulnerability type classification: Common Weakness Enumeration.
- EPSS
- the estimated probability that vulnerability will be used in the next 30 days (Exploit Predication Scoring System).
Critical CVSS 9.0-10.0
Highest severity. Large potential effects - immediate updating is recommended, even without known use.
fctr-id - Critical vulnerability
mqttsnet - Critical vulnerability
seancorfield - Critical vulnerability
Marketing Fire - Critical vulnerability
JetBrains - Critical vulnerability
Canonical - Critical vulnerability
vsftpd - Critical vulnerability
ClickHouse - Critical vulnerability
Google - Critical vulnerability
Google - Critical vulnerability
Veeam - Critical vulnerability
socfortress - Critical vulnerability
docat-org - Critical vulnerability
Progress Software - Critical vulnerability
Progress Software - Critical vulnerability
Assets used in real environment
Imperfections already used by attackers in real attacks (EUVD marked with date of use). Prevent priority regardless of CVSS.
Cisco - High risk vulnerability
Arista Networks - Critical vulnerability
Google - Critical vulnerability
PHP Group - Critical vulnerability
Ivanti - High risk vulnerability
BeyondTrust - Critical vulnerability
Siemens - High risk vulnerability
Palo Alto Networks - High risk vulnerability
Cisco - Critical vulnerability
EG Secure Solutions Inc. - High risk vulnerability
Collabora - Critical vulnerability
Microsoft - High risk vulnerability
Ivanti - High risk vulnerability
GitLab - Critical vulnerability
Atlassian - Critical vulnerability
i The list shall be updated periodically from the ENISA EUVD. The same CVE can also appear in the list of NSAs below - these are different sources.
Priority Anti-Risks (CISA KEV)
Imperfections listed by CISA as a priority in the avoidable catalogue. The federal authorities must eliminate them within a certain timeframe - good practice for others too. Updated periodically.
Source: CISA KEV katalogs
Ivanti Connect Secure - Missing authentication for critical function
Ivanti Connect Secure - Actively used vulnerability
GitLab Community Edition and Enterprise Edition - Overflow of whole numbers
Cisco Secure Firewall ASA Software and Cisco Secure FTD Software - Actively used vulnerability
Broadcom VMware ESX - Actively used vulnerability
Linux Kernel - Actively used vulnerability
Adobe Commerce and Magento - Uploading dangerous file type
Google Brotli - Actively used vulnerability
PHP Group PHP - Use of released memory
PHP Group PHP - Use of released memory
Arista VeloCloud Orchestrator - SQL injection
Collabora Collabora Online – Built-in CODE Server - Injection of operating system commands
Siemens Software Center - Actively used vulnerability
Plex Media Server - Server-side request forgery (SSRF)
Plex Media Server - External control of file path
Plex Media Server - Server-side request forgery (SSRF)
Plex Media Server - Actively used vulnerability
EG Secure Solutions SiteGuard Server Edition - Injection of operating system commands
Fortinet Multiple Products - Crossing the road
BeyondTrust Remote Support - Actively used vulnerability
i CISA KEV - catalogue of priority avoidable vulnerabilities The spoon in the CVE list below indicates overlap with the latest injuries.
Top 20 latest vulnerabilities
Published CVE vulnerabilities from public sources. The list contains only those that already know the manufacturer or the product - without it the record does not say what is directly vulnerable. Updated periodically.
WPVR < 9.0.3 - Insecure direct object reference (IDOR)
The ownership of the object identifier is not verified, which can allow access to foreign data.
WPVR < 9.0.3 - Insecure direct object reference (IDOR)
The ownership of the object identifier is not verified, which can allow access to foreign data.
WPVR < 9.1.3 - Missing authorization
The right of access is not verified which can allow access to foreign resources.
GiveWP < 4.19.0.1 - Missing authorization
The right of access is not verified which can allow access to foreign resources.
GiveWP < 4.19.0.1 - Incorrect authorization
The right of access is being checked incorrectly, which can allow circumvention of restrictions.
GiveWP < 4.19.0.1 - Intersite scripting
The web page gets unverified content that can execute a foreign script and steal a session in the user browser.
GiveWP < 4.19.0.1 - Crossing the road
Insufficient file path check allows access to files outside the allowed folder.
GiveWP < 4.19.0.1 - Sensitive disclosures
The system shall disclose sensitive information to parties for whom it is not intended.
WP Stripe Checkout < 1.2.2.62 - Incorrect authentication
Identity checks are insufficient to allow access without valid accreditation data.
Contact Form by Supsystic < 1.8.0 - Intersite scripting
The web page gets unverified content that can execute a foreign script and steal a session in the user browser.
YunaiV ruoyi-vue-pro 2026.09 - Low risk vulnerability
Follow the manufacturer's recommendations.
YunaiV ruoyi-vue-pro 2026.09 - Incorrect authentication
Identity checks are insufficient to allow access without valid accreditation data.
onyx-dot-app Onyx 5.0 - Intersite scripting
The web page gets unverified content that can execute a foreign script and steal a session in the user browser.
Zylon PrivateGPT 1.0.0 - Server-side request forgery (SSRF)
The server is forced to make requests for arbitrary purposes that can reveal internal resources.
mansi-k Restaurant IMS - Lack of neutralisation of special symbols
Data are transferred to another system without separation from control symbols, so they can be interpreted as a command.
pig-mesh pig 4.0 - Lack of neutralisation of special symbols
Data are transferred to another system without separation from control symbols, so they can be interpreted as a command.
Unitree Go2 1.1.0 - Incorrect authentication
Identity checks are insufficient to allow access without valid accreditation data.
Unitree Go2 1.1.11.0 - Team injection
The team is created from unverified data, which can lead to arbitrary team execution.
phpIPAM 1.8.0 - Intersite scripting
The web page gets unverified content that can execute a foreign script and steal a session in the user browser.
phpIPAM 1.8.0 - Intersite scripting
The web page gets unverified content that can execute a foreign script and steal a session in the user browser.
i The list is updated periodically from public CVE sources.
Top 20 technology news
Most popular news from global technology, security and software stories. Updated periodically.
Source: Hacker News
- 01
- 02
- 03
- 04
- 05
- 06
- 07
- 08
- 09
- 10
- 11
- 12
- 13
- 14
- 15
- 16
- 17
- 18
- 19
- 20
i The list is updated periodically from public sources of technology news.