Live CVE & 0day intelligence

Sound the depths of every vulnerability.

Newly released CVEs across every platform — sleek to read, verbose on demand, and served raw as markdown for AI and agent ingestion. Severity reads as depth: the deeper the contact, the graver the threat.

Browse the feed For agents → /llms.txt

Depth = severity + exploitation

HadalCritical and actively exploited (CISA KEV / 0day)
AbyssalCritical with a public exploit or in-the-wild use
MidnightCritical, or high with PoC / in-the-wild
TwilightHigh severity, or a signal on a lesser flaw
SunlitLow / medium · no exploitation signal

69584

Tracked CVEs

6482

Critical

743

Exploited in wild

3721

Last 7 days

Trending now

Bluesky + Hacker News mentions, last 7 days

1CVE-2026-109618Critical· 9.2RCE via OOM corruption4896
2CVE-2026-109619Critical· 9.2RCE via stale global state2196
3CVE-2026-111497Critical· 9.2Out-of-Bounds Write in Google Brotli Decoder1692
4CVE-2026-99999Critical· 9.3In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksum_start before completing checksum If a packet with bad checksum metadata gets into the ipv4 stack, skb_checksum_help can corrupt the network hea…963
5CVE-2026-110264Critical· 10.0Integer Overflow or Wraparound in GitLab267
6CVE-2026-108707Critical· 9.8Wukong_HRM through commit 186115e contains an authentication bypass vulnerability in ParamAspect that allows unauthenticated attackers to call every HRM API endpoint by omitting the AUTH-TOKEN header266
7CVE-2026-91403Critical· 9.1Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE)262

This week's digest →All digests

Feed

46 matches

CVE-2026-105703Medium· 4.7PoC

3w ago

A vulnerability was determined in PHPGurukul User Registration & Login and User Management System 3.3

A vulnerability was determined in PHPGurukul User Registration & Login and User Management System 3.3. The impacted element is an unknown function of the file loginsystem/admin/change-password.php of the component Change Password Handler…

▾ TwilightPHPGurukul · User Registration & Login and User Management SystemEPSS 0.23%via NVD

CVE-2026-90851Medium· 6.3PoC

1mo ago

A flaw has been found in PHPGurukul Hostel Management System 3.0

A flaw has been found in PHPGurukul Hostel Management System 3.0. This affects an unknown part of the file /admin/includes/checklogin.php. This manipulation of the argument ID causes improper access controls. Remote exploitation of the a…

▾ TwilightPHPGurukul · Hostel Management SystemEPSS 0.37%via NVD

CVE-2026-90850Low· 2.4PoC

1mo ago

A vulnerability was detected in PHPGurukul Hostel Management System 3.0

A vulnerability was detected in PHPGurukul Hostel Management System 3.0. Affected by this issue is some unknown functionality of the file /admin/manage-students.php. The manipulation results in cross site scripting. The attack may be lau…

▾ TwilightPHPGurukul · Hostel Management SystemEPSS 0.37%via NVD

CVE-2026-90846High· 7.3PoC

1mo ago

A vulnerability has been found in PHPGurukul Daily Expense Tracker System 1.1

A vulnerability has been found in PHPGurukul Daily Expense Tracker System 1.1. Impacted is an unknown function of the file /dets/forgot-password.php. The manipulation of the argument email/contactno leads to sql injection. The attack is …

▾ MidnightPHPGurukul · Daily Expense Tracker SystemEPSS 0.43%via NVD

CVE-2026-90845Low· 3.5PoC

1mo ago

A flaw has been found in PHPGurukul Daily Expense Tracker System 1.1

A flaw has been found in PHPGurukul Daily Expense Tracker System 1.1. This issue affects some unknown processing of the file /dets/includes/sidebar.php. Executing a manipulation of the argument FullName can lead to cross site scripting. …

▾ TwilightPHPGurukul · Daily Expense Tracker SystemEPSS 0.35%via NVD

CVE-2026-90844High· 7.3PoC

1mo ago

A vulnerability was detected in PHPGurukul Daily Expense Tracker System 1.1

A vulnerability was detected in PHPGurukul Daily Expense Tracker System 1.1. This vulnerability affects unknown code of the file /dets/index.php of the component Login. Performing a manipulation of the argument email results in sql injec…

▾ MidnightPHPGurukul · Daily Expense Tracker SystemEPSS 0.43%via NVD

CVE-2026-90842Low· 3.7PoC

1mo ago

A weakness has been identified in PHPGurukul Blood Donor Management System 1.0

A weakness has been identified in PHPGurukul Blood Donor Management System 1.0. Affected by this issue is some unknown functionality of the file application/models/admin/Login_Model.php. This manipulation of the argument password/email/c…

▾ TwilightPHPGurukul · Blood Donor Management SystemEPSS 0.31%via NVD

CVE-2026-90841High· 7.3PoC

1mo ago

A security flaw has been discovered in PHPGurukul Blood Donor Management System 1.0

A security flaw has been discovered in PHPGurukul Blood Donor Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /application/controllers/admin/Report.php of the component Report Endpoint. The m…

▾ MidnightPHPGurukul · Blood Donor Management SystemEPSS 0.43%via NVD

CVE-2026-90840High· 7.3PoC

1mo ago

A vulnerability was identified in PHPGurukul Blood Donor Management System 1.0

A vulnerability was identified in PHPGurukul Blood Donor Management System 1.0. Affected is the function __construct of the file /application/controllers/admin/Dashboard.php of the component Admin Controllers. The manipulation leads to i…

▾ MidnightPHPGurukul · Blood Donor Management SystemEPSS 0.69%via NVD

CVE-2026-90519Medium· 6.3PoC

1mo ago

A weakness has been identified in PHPGurukul Bank Locker Management System 1.0

A weakness has been identified in PHPGurukul Bank Locker Management System 1.0. Affected is an unknown function of the file /blms/banker/add-locker-form.php. This manipulation of the argument addressproof causes unrestricted upload. Remo…

▾ TwilightPHPGurukul · Bank Locker Management SystemEPSS 0.37%via NVD

CVE-2026-90517Medium· 5.3PoC

1mo ago

A vulnerability was identified in PHPGurukul Bank Locker Management System 1.0

A vulnerability was identified in PHPGurukul Bank Locker Management System 1.0. This affects an unknown function of the file /blms/view-assign-locker.php. The manipulation of the argument ltid leads to authorization bypass. The attack ma…

▾ TwilightPHPGurukul · Bank Locker Management SystemEPSS 0.57%via NVD

CVE-2026-90575Low· 3.7PoC

1mo ago

A weakness has been identified in PHPGurukul Small CRM 4.0

A weakness has been identified in PHPGurukul Small CRM 4.0. This impacts the function unserialize of the file /crm/login.php of the component Login Success Handler. This manipulation of the argument geopluginURL causes deserialization. I…

▾ TwilightPHPGurukul · Small CRMEPSS 0.48%via NVD

CVE-2026-90518Medium· 6.3PoC

1mo ago

A security flaw has been discovered in PHPGurukul Bank Locker Management System 1.0

A security flaw has been discovered in PHPGurukul Bank Locker Management System 1.0. This impacts an unknown function of the file sidebar.php. The manipulation of the argument UserType results in improper access controls. The attack may …

▾ TwilightPHPGurukul · Bank Locker Management SystemEPSS 0.37%via NVD

CVE-2025-15406Medium· 6.3

10mo ago

A flaw has been found in PHPGurukul Online Course Registration up to 3.1

A flaw has been found in PHPGurukul Online Course Registration up to 3.1. This affects an unknown function. This manipulation causes missing authorization. Remote exploitation of the attack is possible. The exploit has been published and…

▾ Sunlitphpgurukul · online_course_registrationEPSS 0.46%via NVD

CVE-2025-13577Low· 3.5

11mo ago

A flaw has been found in PHPGurukul Hostel Management System 2.1

A flaw has been found in PHPGurukul Hostel Management System 2.1. The impacted element is an unknown function of the file /register-complaint.php. Executing a manipulation of the argument cdetails can lead to cross site scripting. It is …

▾ Sunlitphpgurukul · hostel_management_systemEPSS 0.24%via NVD

CVE-2024-44659Critical· 9.8

11mo ago

PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the email parameter in forgot-password.php.

▾ Midnightphpgurukul · online_shopping_portalEPSS 0.44%via NVD

CVE-2025-13247High· 7.3

11mo ago

A security flaw has been discovered in PHPGurukul Tourism Management System 1.0

A security flaw has been discovered in PHPGurukul Tourism Management System 1.0. The affected element is an unknown function of the file /admin/user-bookings.php. The manipulation of the argument uid results in sql injection. It is possi…

▾ Twilightphpgurukul · tourism_management_systemEPSS 0.41%via NVD

CVE-2025-12312Low· 2.4

1y ago

A flaw has been found in PHPGurukul Curfew e-Pass Management System 1.0

A flaw has been found in PHPGurukul Curfew e-Pass Management System 1.0. Impacted is an unknown function of the file view-pass-detail.php. This manipulation of the argument Fullname/Category causes cross site scripting. The attack may be…

▾ Sunlitphpgurukul · curfew_e-pass_management_systemEPSS 0.26%via NVD

CVE-2025-12311Low· 2.4

1y ago

A vulnerability was detected in PHPGurukul Curfew e-Pass Management System 1.0

A vulnerability was detected in PHPGurukul Curfew e-Pass Management System 1.0. This issue affects some unknown processing of the file edit-category-detail.php. The manipulation of the argument catname results in cross site scripting. Th…

▾ Sunlitphpgurukul · curfew_e-pass_management_systemEPSS 0.26%via NVD

CVE-2025-12303Low· 2.4

1y ago

A flaw has been found in PHPGurukul Curfew e-Pass Management System 1.0

A flaw has been found in PHPGurukul Curfew e-Pass Management System 1.0. The impacted element is an unknown function of the file admin-profile.php. Executing a manipulation of the argument adminname/email can lead to cross site scripting…

▾ Sunlitphpgurukul · curfew_e-pass_management_systemEPSS 0.26%via NVD

CVE-2025-11507High· 7.3

1y ago

A weakness has been identified in PHPGurukul Beauty Parlour Management System 1.1

A weakness has been identified in PHPGurukul Beauty Parlour Management System 1.1. The impacted element is an unknown function of the file /admin/search-invoices.php. This manipulation of the argument searchdata causes sql injection. The…

▾ Twilightphpgurukul · beauty_parlour_management_systemEPSS 0.42%via NVD

CVE-2025-11506High· 7.3

1y ago

A security flaw has been discovered in PHPGurukul Beauty Parlour Management System 1.1

A security flaw has been discovered in PHPGurukul Beauty Parlour Management System 1.1. The affected element is an unknown function of the file /admin/search-appointment.php. The manipulation of the argument searchdata results in sql inj…

▾ Twilightphpgurukul · beauty_parlour_management_systemEPSS 0.42%via NVD

CVE-2025-11505High· 7.3

1y ago

A vulnerability was identified in PHPGurukul Beauty Parlour Management System 1.1

A vulnerability was identified in PHPGurukul Beauty Parlour Management System 1.1. Impacted is an unknown function of the file /admin/new-appointment.php. The manipulation of the argument delid leads to sql injection. It is possible to i…

▾ Twilightphpgurukul · beauty_parlour_management_systemEPSS 0.48%via NVD

CVE-2025-11503High· 7.3

1y ago

A vulnerability was determined in PHPGurukul Beauty Parlour Management System 1.1

A vulnerability was determined in PHPGurukul Beauty Parlour Management System 1.1. This issue affects some unknown processing of the file /admin/manage-services.php. Executing a manipulation of the argument delid can lead to sql injectio…

▾ Twilightphpgurukul · beauty_parlour_management_systemEPSS 0.48%via NVD

CVE-2025-11390Medium· 4.3

1y ago

A weakness has been identified in PHPGurukul Cyber Cafe Management System 1.0

A weakness has been identified in PHPGurukul Cyber Cafe Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /search.php of the component POST Parameter Handler. Executing a manipulation of the ar…

▾ Sunlitphpgurukul · cyber_cafe_management_systemEPSS 0.36%via NVD

From the blog

All posts →

Oct 27, 2026

Sound the depths of every vulnerability.

Trending now

Feed

A vulnerability was determined in PHPGurukul User Registration & Login and User Management System 3.3

A flaw has been found in PHPGurukul Hostel Management System 3.0

A vulnerability was detected in PHPGurukul Hostel Management System 3.0

A vulnerability has been found in PHPGurukul Daily Expense Tracker System 1.1

A flaw has been found in PHPGurukul Daily Expense Tracker System 1.1

A vulnerability was detected in PHPGurukul Daily Expense Tracker System 1.1

A weakness has been identified in PHPGurukul Blood Donor Management System 1.0

A security flaw has been discovered in PHPGurukul Blood Donor Management System 1.0

A vulnerability was identified in PHPGurukul Blood Donor Management System 1.0

A weakness has been identified in PHPGurukul Bank Locker Management System 1.0

A vulnerability was identified in PHPGurukul Bank Locker Management System 1.0

A weakness has been identified in PHPGurukul Small CRM 4.0

A security flaw has been discovered in PHPGurukul Bank Locker Management System 1.0

A flaw has been found in PHPGurukul Online Course Registration up to 3.1

A flaw has been found in PHPGurukul Hostel Management System 2.1

PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the email parameter in forgot-password.php.

A security flaw has been discovered in PHPGurukul Tourism Management System 1.0

A flaw has been found in PHPGurukul Curfew e-Pass Management System 1.0

A vulnerability was detected in PHPGurukul Curfew e-Pass Management System 1.0

A flaw has been found in PHPGurukul Curfew e-Pass Management System 1.0

A weakness has been identified in PHPGurukul Beauty Parlour Management System 1.1

A security flaw has been discovered in PHPGurukul Beauty Parlour Management System 1.1

A vulnerability was identified in PHPGurukul Beauty Parlour Management System 1.1

A vulnerability was determined in PHPGurukul Beauty Parlour Management System 1.1

A weakness has been identified in PHPGurukul Cyber Cafe Management System 1.0

From the blog

VulnSea has moved to vulnsea.com (and what changed since September)

What's new: open corpus, three new MCP tools, vendor advisories, package pages

Wiring VulnSea into an agent: a hands-on tutorial

Sound the depths of every vulnerability.

Trending now

Feed

A vulnerability was determined in PHPGurukul User Registration & Login and User Management System 3.3

A flaw has been found in PHPGurukul Hostel Management System 3.0

A vulnerability was detected in PHPGurukul Hostel Management System 3.0

A vulnerability has been found in PHPGurukul Daily Expense Tracker System 1.1

A flaw has been found in PHPGurukul Daily Expense Tracker System 1.1

A vulnerability was detected in PHPGurukul Daily Expense Tracker System 1.1

A weakness has been identified in PHPGurukul Blood Donor Management System 1.0

A security flaw has been discovered in PHPGurukul Blood Donor Management System 1.0

A vulnerability was identified in PHPGurukul Blood Donor Management System 1.0

A weakness has been identified in PHPGurukul Bank Locker Management System 1.0

A vulnerability was identified in PHPGurukul Bank Locker Management System 1.0

A weakness has been identified in PHPGurukul Small CRM 4.0

A security flaw has been discovered in PHPGurukul Bank Locker Management System 1.0

A flaw has been found in PHPGurukul Online Course Registration up to 3.1

A flaw has been found in PHPGurukul Hostel Management System 2.1

PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the email parameter in forgot-password.php.

A security flaw has been discovered in PHPGurukul Tourism Management System 1.0

A flaw has been found in PHPGurukul Curfew e-Pass Management System 1.0

A vulnerability was detected in PHPGurukul Curfew e-Pass Management System 1.0

A flaw has been found in PHPGurukul Curfew e-Pass Management System 1.0

A weakness has been identified in PHPGurukul Beauty Parlour Management System 1.1

A security flaw has been discovered in PHPGurukul Beauty Parlour Management System 1.1

A vulnerability was identified in PHPGurukul Beauty Parlour Management System 1.1

A vulnerability was determined in PHPGurukul Beauty Parlour Management System 1.1

A weakness has been identified in PHPGurukul Cyber Cafe Management System 1.0

From the blog

VulnSea has moved to vulnsea.com (and what changed since September)

What's new: open corpus, three new MCP tools, vendor advisories, package pages

Wiring VulnSea into an agent: a hands-on tutorial