I was getting a tour of the employees only section of a local government building and I looked down a hallway and found this. No cage. No room. Nothing more than air conditioning for controls. Just raw blinking life.
Vulnerability-Lookup is an open-source platform run by CIRCL that aggregates vulnerability advisories from many sources (CVE, GitHub, PySec, and more), enriches them with sightings from MISP, Exploit-DB, Mastodon, Telegram, Nuclei and others, and federates five Known Exploited Vulnerabilities catalogs (CISA, CIRCL, ENISA / EU CSIRTs Network, The Shadowserver Foundation, Previdian) through the GCVE initiative.
Vulnerability-Lookup (https://github.com/vulnerability-lookup/vulnerability-lookup) is an open-source platform (AGPL) for fast vulnerability lookup and correlation across many sources — CVE, EUVD, GHSA, OSV, CSAF/VEX, national CERTs — with collaborative annotation, sightings and coordinated disclosure. 6.0.0 is out today; two big additions this round.
Vulnerability-Lookup now ingests Red Hat’s per-CVE CSAF VEX documents and attaches them straight to the vulnerabilities you’re already tracking. Which products are affected? Which are fixed? Which were never affected at all? One glance at the new VEX tab — or the EPSS-style VEX badge right in the vulnerability header — and you know.
This vulnerability report has been generated with the help of AI, using the
VulnMCP tooling on top of
Vulnerability-Lookup,
with contributions from the platform’s community.
Since February 2026, the XLAB large-scale network threat perception system has detected a new malware family active in cyberspace that adopts a Loader + Core (two-stage loading) architecture. Currently, the family has spawned multiple variants, with the main core functionality being the execution of large-scale Distributed Denial-of-Service (DDoS) attacks. It also possesses strong cross-platform adaptability and continuous evolution capabilities.
We are excited to share the result of a fruitful collaboration with The Shadowserver Foundation: a new Known Exploited Vulnerabilities (KEV) Catalog (BCP-07 compliant) built directly from their global honeypot telemetry.
Vulnerability-Lookup now provides a coverage matrix on its KEV catalogs page, showing which Known Exploited Vulnerability catalogs (e.g. EUVD KEV, CISA KEV, CIRCL KEV) reference the most recently updated vulnerabilities. Each row corresponds to a vulnerability and each column to a catalog, making it straightforward to identify overlaps and gaps between KEV sources. All catalogs follow the GCVE-BCP-07 standard for documenting actively exploited vulnerabilities.
June 2026 Android Security Bulletin notes CVE-2025-48595 is being exploited in the wild. It’s being widely misreported in tech media as a 0-day vulnerability being exploited. That’s a major misunderstanding of Android Security Bulletins and how poorly OEMs keep up with patches.
We are excited to announce the release of Vulnerability-Lookup 4.6.0!
This version brings more transparency, new data sources, API improvements, notable UI enhancements, and several performance and stability fixes.
I was thinking a bit about the bugs I found in the Piefed codebase yesterday. And these led to an emergency fix by the dev that’s now been implemented. https://codeberg.org/rimu/pyfedi/commit/093a466935849f27b3ecf2eab159129186320417
looks like 19 million records were exposed https://www.securitymagazine.com/articles/102248-hackers-claim-19m-records-stolen-from-french-government-agency
This vulnerability report has been generated with the help of AI, using the
VulnMCP tooling on top of
Vulnerability-Lookup,
with contributions from the platform’s community.
🚀 We’ve just published a new article introducing a Russian-language severity classifier, along with improved English and Chinese models for vulnerability descriptions.
This paper addresses a massive headache in enterprise software engineering which is securing codebases that mix multiple programming languages. Large companies rely on a mix of Java, Go, Python, and JavaScript to build their platforms. Historically security teams had to use entirely separate static analysis tools for each language which scales terribly and creates a fragmented mess of vulnerability reports. Existing multi-language frameworks like CodeQL and Joern fall short. CodeQL relies heavily on language-specific extractors which means only a tiny fraction of its codebase is actually shared across languages. Joern tries to shove everything into a unified graph but ends up over-abstracting the code and losing critical nuances like how JavaScript handles prototype chains.
We recently made significant improvements to our CNVD severity classifier and the underlying Vulnerability-CNVD dataset, prompted by a thorough independent review from Eric Romang. These changes ship in VulnTrain v3.0.0, released today.
PieFed
FauxPseudo
Arthur Besse
Cedric
☆ Yσɠƚԋσʂ ☆
modem_down
Zerush
Michael Altfield
davel
ghost_laptop
Innerworld
exu
