Security services · Products · Sourced intelligence Complex threats.Clear next moves. Expert services, focused products and practical research. Connect your security priorities to the next action that matters.
48 services across six disciplines CVE intelligence sourced from CISA, NVD and FIRST No invented statistics
Live evidence · 7 days · 6-hour sync Last sync Nov 14, 2026, 6:23 PM UTC
4,784 CVEs published (NVD)
80 with a public PoC on GitHub
1,781 in CISA's exploited catalog
CVE-2026-129254 A flaw has been found in Opixido OCMS up to b7c15660aba83d96677c1a9abaa69c082a24f21c. This impacts an unknown function of the file admin/TUI/index.php of the component Admin TUI. This manipulation of the argument img causes cross site scripting. The attack can be initiated remotely. The exploit has been published and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS 2.1 CVE-2026-126173 The AutomatorWP Pro plugin for WordPress' webhook addon is vulnerable to authorization bypass in all versions up to, and including, 1.4.4. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to reset the password of any WordPress account, including administrators, resulting in full account takeover. This is only exploitable when an administrator has configured an automation pairing a Receive Webhook trigger — with an 'Is the user ID' field — to an Update-User action whose User ID field is left blank and whose Password field is mapped to the webhook password tag, which is a documented, supported plugin configuration.
CVSS 9.8 CVE-2026-129110 sysPass 3.0.1 through 3.2.11 contains an authentication bypass vulnerability that allows unauthenticated attackers to reinstall an already-installed instance by POSTing to the install/install handler, which never checks isInstalled(). Attackers can overwrite config.xml, point the application at an attacker-controlled database, create an administrator account, and plant serialized PublicLink gadget chains triggered via account/viewLink to execute commands.
CVSS 9.3 From the research desk The patch is available. Is the exposure closed?Why zero-day response and everyday remediation belong together.
Read the source record ↗ 02 / Our products SECURELINE / GRC Product introduction
Governance, Explore Secureline GRC and its public product portal. Start a conversation about the workflow your organisation needs.
Controls Evidence Risks Audits
Explore Secureline GRC ↗ SECURELINE / PROMPTGATE Product introduction
A distinct product. A dedicated place for Promptgate, separate from the service directory. Contact Secureline for confirmed product details.
Meet Promptgate ↗ 03 / The research journal READING NOTE From the Secureline blog
Why annual VAPT A source-linked reading note on the gap between periodic testing and the way applications, identities and infrastructure actually change.
Read the note ↗ PROPOSED WHITEPAPER Draft outline
From a finding to An editorial outline connecting vulnerability evidence, business context, remediation ownership and verification.
Explore the outline ↗ 04 / Evidence, with context Look past the headline. Source-backed vulnerability records and clearly labelled research. No simulated alerts. No invented attack counters.
The last 7 days, in proportion
All: CVEs published to the NVD in the window. Listed: the ones shown on the latest-CVEs page (every CVE with a public PoC or in CISA KEV, then the highest CVSS scores). PoC: at least one public GitHub repository names the CVE. KEV: added to CISA's exploited catalog. The separate KEV snapshot holds 1,781 records (source updated Nov 13, 2026). None of this measures your exposure.