🛡️ blast.kok.fyi / today

Hosting-relevant · last 48 hours · refresh 2026-07-03 22:37 EEST · refresh every 15 min · ← main · unfiltered → · cPanel releases → · WordPress →
1631CISA KEV total 0KEV recent (top 25) 0CVEs published 7d 0Critical 7d 8Security headlines 18Vendor updates 1WordPress

🚨 CISA KEV — recently added

⚠️ KEV contains historical CVEs (CVE-2008, CVE-2010 etc) that are currently being actively exploited. Watch the "ADDED" date — that's when CISA confirmed active exploitation in 2026, NOT when the CVE was published.
CISA KEV feed unavailable this cycle

📋 NVD — recent CVEs (7 days)

NVD feed unavailable this cycle

📰 Security headlines

CVE-2026-56015: Net::IP::LPM versions through 1.10 for Perl allow a heap out-of-bounds read via an unbounded prefix length
OSS-Security (Marcel-tier disclosure list) · 2026-07-03 17:34
ARToken PhaaS exposes EvilTokens' Microsoft 365 phishing toolkit
BleepingComputer · 2026-07-03 17:12
PamStealer Uses Fake Maccy Sites and PAM Checks to Steal Mac Login Passwords
The Hacker News · 2026-07-03 11:03
CVE-2026-47898: Apache Lucene.Net: XXE vulnerability in Lucene.Net.Analysis.Common PatternParser
OSS-Security (Marcel-tier disclosure list) · 2026-07-03 04:03
CVE-2026-47897: Apache Lucene.Net: Arbitrary file write from malicious server to Lucene.Net.Replicator client
OSS-Security (Marcel-tier disclosure list) · 2026-07-03 04:01
Show 3 more headlines
CVE-2026-47896: Apache Lucene.Net: Unauthenticated arbitrary file read on the Lucene.Net.Replicator replication server
OSS-Security (Marcel-tier disclosure list) · 2026-07-03 03:59
ConsentFix and ClickFix: How Microsoft 365 Accounts are Hijacked in 3 Seconds
BleepingComputer · 2026-07-02 17:00
Microsoft fixes bug that removed Copilot buttons in Outlook
BleepingComputer · 2026-07-02 15:15

🏷️ Vendor updates

Plesk Obsidian 18.0.79: Security Audit, Expanded REST API, and Microsoft SQL Server 2025 Support
Plesk · 2026-07-03 18:15
CVE-2026-56405 libexpat before 2.8.2 has an integer overflow in getAttributeId.
Microsoft MSRC · 2026-07-03 11:07
CVE-2026-14258 Dhcpcd: dhcpcd infinite loop and out-of-bounds read via zero-length ipv6 nd option in router advertisement handling
Microsoft MSRC · 2026-07-03 11:03
CVE-2026-53357 Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del()
Microsoft MSRC · 2026-07-03 11:02
CVE-2026-56149 Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service
Microsoft MSRC · 2026-07-03 11:02
Show 13 more vendor updates
CVE-2026-49090 Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service
Microsoft MSRC · 2026-07-03 11:01
Scaling NetOps-as-Code: Improving security, eliminating random scripting, and more
Red Hat · 2026-07-03 03:00
Friday Five — July 3, 2026
Red Hat · 2026-07-03 03:00
Beyond the baseline: Introducing the Digital Sovereignty Readiness Appraisal
Red Hat · 2026-07-03 03:00
BackendTLSPolicy expands Gateway API transport security
Red Hat · 2026-07-03 03:00
USN-8503-1: ncurses vulnerability
Ubuntu Security · 2026-07-03 01:04
Wordfence Intelligence Weekly WordPress Vulnerability Report (June 22, 2026 to June 28, 2026)
Wordfence (WP Security) · 2026-07-02 21:34
USN-8500-1: Vim vulnerabilities
Ubuntu Security · 2026-07-02 19:46
USN-8501-1: Linux kernel vulnerabilities
Ubuntu Security · 2026-07-02 19:14
USN-8493-2: Linux kernel (Oracle) vulnerabilities
Ubuntu Security · 2026-07-02 19:07
USN-8499-1: Linux kernel (Xilinx) vulnerabilities
Ubuntu Security · 2026-07-02 18:56
Introducing Red Hat OpenShift Service Mesh 3.4
Red Hat · 2026-07-02 03:00
Semantic overload: why AI agents get facts wrong
Redis · 2026-07-02 03:00
Static dashboard · sources: CISA KEV, NVD, and curated security RSS feeds. No login. No tracking. Cached every 15 min. · built by Nemesis for Yearn