Live CVE & 0day intelligence

Sound the depths of every vulnerability.

Newly released CVEs across every platform — sleek to read, verbose on demand, and served raw as markdown for AI and agent ingestion. Severity reads as depth: the deeper the contact, the graver the threat.

Browse the feed For agents → /llms.txt

Depth = severity + exploitation

HadalCritical and actively exploited (CISA KEV / 0day)
AbyssalCritical with a public exploit or in-the-wild use
MidnightCritical, or high with PoC / in-the-wild
TwilightHigh severity, or a signal on a lesser flaw
SunlitLow / medium · no exploitation signal

69545

Tracked CVEs

6477

Critical

737

Exploited in wild

3783

Last 7 days

Trending now

Bluesky + Hacker News mentions, last 7 days

1CVE-2026-109618Critical· 9.2RCE via OOM corruption4896
2CVE-2026-109619Critical· 9.2RCE via stale global state2196
3CVE-2026-111497Critical· 9.2Out-of-Bounds Write in Google Brotli Decoder1592
4CVE-2026-99999Critical· 9.3In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksum_start before completing checksum If a packet with bad checksum metadata gets into the ipv4 stack, skb_checksum_help can corrupt the network hea…963
5CVE-2026-110264Critical· 10.0Integer Overflow or Wraparound in GitLab267
6CVE-2026-108707Critical· 9.8Wukong_HRM through commit 186115e contains an authentication bypass vulnerability in ParamAspect that allows unauthenticated attackers to call every HRM API endpoint by omitting the AUTH-TOKEN header266
7CVE-2026-91403Critical· 9.1Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE)262

This week's digest →All digests

Feed

20 matches

CVE-2025-15243High· 7.3

10mo ago

A flaw has been found in code-projects Simple Stock System 1.0

A flaw has been found in code-projects Simple Stock System 1.0. This affects an unknown function of the file /market/login.php. Executing a manipulation of the argument Username can lead to sql injection. The attack can be launched remot…

▾ Twilightcarmelo · simple_stock_systemEPSS 0.48%via NVD

CVE-2025-14962Medium· 4.3

10mo ago

A flaw has been found in code-projects Simple Stock System 1.0

A flaw has been found in code-projects Simple Stock System 1.0. The impacted element is an unknown function of the file /market/chatuser.php. This manipulation causes cross site scripting. The attack is possible to be carried out remotel…

▾ Sunlitcarmelo · simple_stock_systemEPSS 0.33%via NVD

CVE-2025-14647High· 7.3

10mo ago

A weakness has been identified in code-projects Computer Book Store 1.0

A weakness has been identified in code-projects Computer Book Store 1.0. Affected is an unknown function of the file /admin_delete.php. This manipulation of the argument bookisbn causes sql injection. It is possible to initiate the attac…

▾ Twilightcarmelo · computer_book_storeEPSS 0.39%via NVD

CVE-2025-14642Medium· 4.7

10mo ago

A vulnerability has been found in code-projects Computer Laboratory System 1.0

A vulnerability has been found in code-projects Computer Laboratory System 1.0. Impacted is an unknown function of the file technical_staff_pic.php. Such manipulation of the argument image leads to unrestricted upload. The attack may be …

▾ Sunlitcarmelo · computer_laboratory_systemEPSS 0.39%via NVD

CVE-2025-14641Medium· 4.7

10mo ago

A flaw has been found in code-projects Computer Laboratory System 1.0

A flaw has been found in code-projects Computer Laboratory System 1.0. This issue affects some unknown processing of the file admin/admin_pic.php. This manipulation of the argument image causes unrestricted upload. The attack may be init…

▾ Sunlitcarmelo · computer_laboratory_systemEPSS 0.39%via NVD

CVE-2025-14590High· 7.3

10mo ago

A security vulnerability has been detected in code-projects Prison Management System 2.0

A security vulnerability has been detected in code-projects Prison Management System 2.0. Impacted is an unknown function of the file /admin/search1.php. The manipulation of the argument keyname leads to sql injection. It is possible to …

▾ Twilightcarmelo · prison_management_systemEPSS 0.44%via NVD

CVE-2025-14589Medium· 6.3

10mo ago

A weakness has been identified in code-projects Prison Management System 2.0

A weakness has been identified in code-projects Prison Management System 2.0. This issue affects some unknown processing of the file /admin/search.php. Executing a manipulation of the argument keyname can lead to sql injection. The attac…

▾ Sunlitcarmelo · prison_management_systemEPSS 0.35%via NVD

CVE-2025-14531Medium· 4.3

10mo ago

A vulnerability was found in code-projects Rental Management System 2.0

A vulnerability was found in code-projects Rental Management System 2.0. This affects an unknown function of the file Transaction.java of the component Log Handler. Performing manipulation results in crlf injection. The attack can be ini…

▾ Sunlitcarmelo · rental_management_systemEPSS 0.32%via NVD

CVE-2025-14230Medium· 6.3

10mo ago

A vulnerability was detected in code-projects Daily Time Recording System 4.5.0

A vulnerability was detected in code-projects Daily Time Recording System 4.5.0. The impacted element is an unknown function of the file /admin/add_payroll.php. Performing manipulation of the argument detail_Id results in sql injection. …

▾ Sunlitcarmelo · daily_time_recording_systemEPSS 0.31%via NVD

CVE-2025-14223High· 7.3

10mo ago

A vulnerability has been found in code-projects Simple Leave Manager 1.0

A vulnerability has been found in code-projects Simple Leave Manager 1.0. Affected by this vulnerability is an unknown functionality of the file /request.php. Such manipulation of the argument staff_id leads to sql injection. The attack …

▾ Twilightcarmelo · simple_leave_managerEPSS 0.39%via NVD

CVE-2025-14203Medium· 6.3

10mo ago

A flaw has been found in code-projects Question Paper Generator up to 1.0

A flaw has been found in code-projects Question Paper Generator up to 1.0. This vulnerability affects unknown code of the file /selectquestionuser.php. This manipulation of the argument subid causes sql injection. Remote exploitation of …

▾ Sunlitcarmelo · question_paper_generatorEPSS 0.35%via NVD

CVE-2025-13583High· 7.3

11mo ago

A weakness has been identified in code-projects Question Paper Generator 1.0

A weakness has been identified in code-projects Question Paper Generator 1.0. This affects an unknown part of the file /signupscript.php of the component POST Parameter Handler. Executing manipulation of the argument Fname can lead to sq…

▾ Twilightcarmelo · question_paper_generatorEPSS 0.42%via NVD

CVE-2025-12263Medium· 6.3

1y ago

A vulnerability was identified in code-projects Online Event Judging System 1.0

A vulnerability was identified in code-projects Online Event Judging System 1.0. Affected is an unknown function of the file /edit_judge.php. The manipulation of the argument judge_id leads to sql injection. The attack may be initiated r…

▾ Sunlitcarmelo · online_event_judging_systemEPSS 0.34%via NVD

CVE-2025-12262Medium· 6.3

1y ago

A vulnerability was determined in code-projects Online Event Judging System 1.0

A vulnerability was determined in code-projects Online Event Judging System 1.0. This impacts an unknown function of the file /edit_criteria.php. Executing manipulation of the argument crit_id can lead to sql injection. The attack can be…

▾ Sunlitcarmelo · online_event_judging_systemEPSS 0.34%via NVD

CVE-2025-12255Medium· 6.3

1y ago

A security flaw has been discovered in code-projects Online Event Judging System 1.0

A security flaw has been discovered in code-projects Online Event Judging System 1.0. This affects an unknown part of the file /add_contestant.php. Performing manipulation of the argument fullname results in sql injection. Remote exploit…

▾ Sunlitcarmelo · online_event_judging_systemEPSS 0.33%via NVD

CVE-2025-12254Medium· 6.3

1y ago

A vulnerability was identified in code-projects Online Event Judging System 1.0

A vulnerability was identified in code-projects Online Event Judging System 1.0. Affected by this issue is some unknown functionality of the file /add_judge.php. Such manipulation of the argument fullname leads to sql injection. The atta…

▾ Sunlitcarmelo · online_event_judging_systemEPSS 0.33%via NVD

CVE-2025-12252Medium· 6.3

1y ago

A vulnerability was found in code-projects Online Event Judging System 1.0

A vulnerability was found in code-projects Online Event Judging System 1.0. Affected is an unknown function of the file /ajax/action.php. The manipulation of the argument content results in sql injection. The attack can be launched remot…

▾ Sunlitcarmelo · online_event_judging_systemEPSS 0.33%via NVD

CVE-2025-12256Medium· 6.3

1y ago

A weakness has been identified in code-projects Online Event Judging System 1.0

A weakness has been identified in code-projects Online Event Judging System 1.0. This vulnerability affects unknown code of the file /edit_contestant.php. Executing manipulation of the argument contestant_id can lead to sql injection. Th…

▾ Sunlitcarmelo · online_event_judging_systemEPSS 0.44%via NVD

CVE-2025-11556High· 7.3

1y ago

A flaw has been found in code-projects Simple Leave Manager 1.0

A flaw has been found in code-projects Simple Leave Manager 1.0. This vulnerability affects unknown code of the file /user.php. This manipulation of the argument table causes sql injection. Remote exploitation of the attack is possible. …

▾ Twilightcarmelo · simple_leave_managerEPSS 0.48%via NVD

CVE-2025-11551Medium· 6.3

1y ago

A vulnerability was determined in code-projects Student Result Manager 1.0

A vulnerability was determined in code-projects Student Result Manager 1.0. This affects an unknown function of the file src/students/Database.java. This manipulation of the argument roll/name/gpa causes sql injection. It is possible to …

▾ Sunlitcarmelo · student_result_managerEPSS 0.40%via NVD

From the blog

All posts →

Oct 27, 2026

Sound the depths of every vulnerability.

Trending now

Feed

A flaw has been found in code-projects Simple Stock System 1.0

A flaw has been found in code-projects Simple Stock System 1.0

A weakness has been identified in code-projects Computer Book Store 1.0

A vulnerability has been found in code-projects Computer Laboratory System 1.0

A flaw has been found in code-projects Computer Laboratory System 1.0

A security vulnerability has been detected in code-projects Prison Management System 2.0

A weakness has been identified in code-projects Prison Management System 2.0

A vulnerability was found in code-projects Rental Management System 2.0

A vulnerability was detected in code-projects Daily Time Recording System 4.5.0

A vulnerability has been found in code-projects Simple Leave Manager 1.0

A flaw has been found in code-projects Question Paper Generator up to 1.0

A weakness has been identified in code-projects Question Paper Generator 1.0

A vulnerability was identified in code-projects Online Event Judging System 1.0

A vulnerability was determined in code-projects Online Event Judging System 1.0

A security flaw has been discovered in code-projects Online Event Judging System 1.0

A vulnerability was identified in code-projects Online Event Judging System 1.0

A vulnerability was found in code-projects Online Event Judging System 1.0

A weakness has been identified in code-projects Online Event Judging System 1.0

A flaw has been found in code-projects Simple Leave Manager 1.0

A vulnerability was determined in code-projects Student Result Manager 1.0

From the blog

VulnSea has moved to vulnsea.com (and what changed since September)

What's new: open corpus, three new MCP tools, vendor advisories, package pages

Wiring VulnSea into an agent: a hands-on tutorial

Sound the depths of every vulnerability.

Trending now

Feed

A flaw has been found in code-projects Simple Stock System 1.0

A flaw has been found in code-projects Simple Stock System 1.0

A weakness has been identified in code-projects Computer Book Store 1.0

A vulnerability has been found in code-projects Computer Laboratory System 1.0

A flaw has been found in code-projects Computer Laboratory System 1.0

A security vulnerability has been detected in code-projects Prison Management System 2.0

A weakness has been identified in code-projects Prison Management System 2.0

A vulnerability was found in code-projects Rental Management System 2.0

A vulnerability was detected in code-projects Daily Time Recording System 4.5.0

A vulnerability has been found in code-projects Simple Leave Manager 1.0

A flaw has been found in code-projects Question Paper Generator up to 1.0

A weakness has been identified in code-projects Question Paper Generator 1.0

A vulnerability was identified in code-projects Online Event Judging System 1.0

A vulnerability was determined in code-projects Online Event Judging System 1.0

A security flaw has been discovered in code-projects Online Event Judging System 1.0

A vulnerability was identified in code-projects Online Event Judging System 1.0

A vulnerability was found in code-projects Online Event Judging System 1.0

A weakness has been identified in code-projects Online Event Judging System 1.0

A flaw has been found in code-projects Simple Leave Manager 1.0

A vulnerability was determined in code-projects Student Result Manager 1.0

From the blog

VulnSea has moved to vulnsea.com (and what changed since September)

What's new: open corpus, three new MCP tools, vendor advisories, package pages

Wiring VulnSea into an agent: a hands-on tutorial