Vulnerability & exploit intelligence CVE • EPSS • KEV • Exploit Evidence Prioritize what matters now. Know Before They Strike. https://xitter.cf/t.co/zbz8DJisKw
Joined June 2026
- Tweets1.4K
- Following36
- Followers433
- Likes436
Pinned Tweet
Introducing ExploitGrid.
New vulnerabilities and exploits appear every day. The challenge isn't finding them. It's knowing what matters, what's being exploited, and what needs attention first.
We built ExploitGrid for that.
🧵 Here's what we offer:
ALT exploitgrid.net
🚨 Linux KSMBD: the lower-severity flaw may be more urgent.
ZDI-CAN-33367 reportedly has a public root exploit confirmed on AlmaLinux, Debian and Ubuntu, with no merged patch or CVE.
Admins should review exposure and apply the stopgap.
🔎 exploitgrid.net
🚨 Tailscale SSH flaws could let a compromised, authorized device gain root on permitted servers.
This isn’t unauthenticated RCE. Researchers say the findings are lab-tested, with scope under review.
Review SSH policies and disable forwarding if unused.
🔎 exploitgrid.net
🚨 Auth bypasses hit two popular open-source projects today: Snipe-IT via Google SSO and Parse Server via its auth adapter. vLLM also has an SSRF, and YOOtheme’s Joomla RCE now has a second public exploit.
Here’s what hit the feed 👇
🚨 Two critical Wasmtime flaws could let malicious WebAssembly modules escape the sandbox.
CVE-2026-115889 affects multiple architectures. CVE-2026-115893 targets ARM64.
No public exploits reported. Update to fixed releases and rebuild embedded apps.
🔎 exploitgrid.net
🚨 Brotli2Shell may reach beyond HTTP.
JFrog reports reproducing instruction-pointer control in FFmpeg using a crafted JPEG XL file, linking CVE-2026-111497 to a wider attack surface.
Brotli decoder users should check affected versions and apply fixes.
🔎 exploitgrid.net
ExploitGrid Daily Digest
🚨 Top Exploits:
CVE-2021-44228 (CVSS: 10) Apache Softw...
CVE-2024-25600 (CVSS: 10)
CVE-2025-32440 (CVSS: 10) jokob-sk
CVE-2026-102255 (CVSS: 10) sonicwall
CVE-2026-102785 (CVSS: 10) yootheme.com
..🧵👇
[EXPLOIT] CVE-2021-44228 [CRITICAL/PoC]
CVSS: 10 | Vendor: #ApacheSoftwareFoundation
log4shell-audit-3
🔗 exploitgrid.net/exploits/503…
[EXPLOIT] CVE-2024-25600 [CRITICAL/PoC]
CVSS: 10
TryHack3M-Bricks-Heist
🔗 exploitgrid.net/exploits/b37…
ExploitGrid Daily Digest
🚨 Top CVEs:
CVE-2026-116199 (CVSS: 9.2) Grokability
CVE-2026-116163 (CVSS: 9.1) parse-community
CVE-2026-116067 (CVSS: 8.8) ananthakumaran
CVE-2026-116165 (CVSS: 8.8) parse-community
CVE-2026-116176 (CVSS: 8.8) vllm-project
..🧵👇
[CVE] CVE-2026-116067 [HIGH PRIORITY]
CVSS: 8.8 | Vendor: #ananthakumaran
#Paisa before 0.7.8 Path Traversal via Editor and Sheet API
🔗 exploitgrid.net/cve/CVE-2026…
[CVE] CVE-2026-116165 [HIGH PRIORITY]
CVSS: 8.8 | Vendor: #parsecommunity
#Parse Server 9.0.0 before 9.10.4-alpha.4 Unauthenticated Class Schema Deletio...
🔗 exploitgrid.net/cve/CVE-2026…
🚨 The regex bugs behind GitLab’s critical RCE flaws go beyond GitLab.
Ruby has patched its Onigmo regex engine in 4.0.9, 3.4.12 and 3.3.13.
If your app builds regex patterns from user input, check your Ruby version and update.
🔎 exploitgrid.net
ExploitGrid Daily Digest
🚨 Top Exploits:
CVE-2021-44228 (CVSS: 10) Apache Softw...
CVE-2021-44228 (CVSS: 10) Apache Softw...
CVE-2026-110264 (CVSS: 10) gitlab
CVE-2026-110264 (CVSS: 10) gitlab
CVE-2026-110264 (CVSS: 10) gitlab
..🧵👇
[EXPLOIT] CVE-2021-44228 [CRITICAL/PoC]
CVSS: 10 | Vendor: #ApacheSoftwareFoundation
log4shell-audit-evidence
🔗 exploitgrid.net/exploits/04e…
[EXPLOIT] CVE-2021-44228 [CRITICAL/PoC]
CVSS: 10 | Vendor: #ApacheSoftwareFoundation
log4shell-audit-2
🔗 exploitgrid.net/exploits/def…