🧰 VulnCheck

The items that name it 15

• Mirai Botnet Operators Join PHP2Shell Attacks as ASLR Bypass Exploits Emerge
  articleas classification.key entities2026-10-23
• PHP2Shell Exploitation Started Days Before Patches
  articleas affected products2026-10-22It is written here as VulnCheck: more than 2.6 million internet-facing PHP hosts, nearly all vulnerable.
• lee1981 (@lee1981b) on X
  advisoryas classification.key entities2026-10-20
• lee1981 (@lee1981b) on X
  advisoryas classification.key entities2026-10-12
• lee1981 (@lee1981b) on X
  writeupas classification.key entities2026-10-06
• Top 10 attacks on Claude Code and what each one actually broke
  writeupas tools2026-09-23

  Assigned CVE-2026-35020, 35021 and 35022 for command injection findings related to Claude Code's permission system, separate from Anthropic's own tracking.

• GitSpawn: A Single Flaw Lets Untrusted Repos Run Code in Claude Code, Codex, Cursor, and Grok - Manifold Security
  writeupas classification.key entities2026-09-01
• Have We Seen an Acceleration in Discoveries?
  articleas classification.key entities2026-08-14
• Malwoverview 8.0.5
  repoas tools2026-06-28

  Vulnerability database queries (Community/Free tier)

• Orca: CVE-2026-5027 Langflow Path Traversal RCE
  advisoryas classification.key entities2026-06-12
• CSA: VulnOps in the Age of AI
  articleas tools2026-05-13

  Alternative vulnerability database that has emerged to fill gaps left by public enrichment infrastructure

• VulnCheck - Outpace Adversaries
  otheras classification.key entities
• VulnCheck - Outpace Adversaries
  toolas classification.key entities
• Revenge of the SD-WAN: Exploring and Exploiting Yet Another Critical Cisco SD-WAN Vulnerability (CVE-2026-76504)
  writeupas classification.key entities
• Malicious .git Configs Can Make Claude, Codex, Cursor, and Other AI Agents Run Attacker Code
  articleas tools

  Assigned CVE-2026-71963 for the Hermes Agent finding