Ce qui est exploité en ce moment
Des avis publics récents qui nomment un logiciel de site Web que notre analyse reconnaît. Chaque ligne renvoie à sa source. Elle décrit le logiciel, jamais un site en particulier, et ce n’est pas un rapport sur le vôtre.
2026-11-12
Centre canadien pour la cybersécurité
Centre canadien pour la cybersécurité a publié le 2026-11-12 un avis public qui nomme React.
https://cyber.gc.ca/fr/alertes-avis/bulletin-securite-react-av26-1152
2026-11-11
Drupal contributed-module security advisories
Mollie for Drupal - Moderately critical - Information disclosure - SA-CONTRIB-2026-329 (drupal.org, CC BY-SA 2.0)
2026-11-11
Drupal contributed-module security advisories
Mollie for Drupal - Moderately critical - Incorrect authorization - SA-CONTRIB-2026-328 (drupal.org, CC BY-SA 2.0)
2026-11-04
Drupal contributed-module security advisories
REST & JSON API Authentication for Drupal - Critical - Access bypass - SA-CONTRIB-2026-298 (drupal.org, CC BY-SA 2.0)
2026-11-04
Drupal contributed-module security advisories
GroupEx PRO ( Daxko ) integration - Critical - PHP object injection - SA-CONTRIB-2026-278 (drupal.org, CC BY-SA 2.0)
2026-11-03
Centre canadien pour la cybersécurité
Centre canadien pour la cybersécurité a publié le 2026-11-03 un avis public qui nomme WordPress.
https://cyber.gc.ca/fr/alertes-avis/bulletin-securite-wordpress-av26-1117
2026-11-03
CISA Known Exploited Vulnerabilities
WordPress WordPress Core Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability (CISA KEV catalogue, CC0)
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
2026-10-28
WordPress.org security releases
WordPress.org security releases a publié le 2026-10-28 un avis public qui nomme WordPress.
2026-10-26
CISA Known Exploited Vulnerabilities
PHP Memory Corruption Vulnerability (CISA KEV catalogue, CC0)
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
2026-10-26
CISA Known Exploited Vulnerabilities
PHP Stale Internal Request-State Vulnerability (CISA KEV catalogue, CC0)
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
2026-10-21
WordPress.org security releases
WordPress.org security releases a publié le 2026-10-21 un avis public qui nomme PHP.
https://wordpress.org/news/2026/10/critical-php-security-release/
Les éléments des 30 derniers jours, 40 au plus, mis à jour chaque jour. Un nom ici veut dire que ce logiciel peut se trouver sur un site; savoir si le vôtre l’utilise, et en quelle version, c’est ce qu’une analyse lit.
Sources
CISA Known Exploited Vulnerabilities
lue aujourd’hui
CC0 1.0 per the LICENSE of github.com/cisagov/kev-data, read 2026-11-06
Centre canadien pour la cybersécurité
lue aujourd’hui
canada.ca/en/transparency/terms.html, read 2026-11-07: commercial redistribution needs prior written permission, so we link and write our own line, never the title
Centre canadien pour la cybersécurité
lue aujourd’hui
same as cccs-en
CISA cybersecurity advisories
lue aujourd’hui
no reuse clause found on cisa.gov/privacy-policy, 2026-11-07: link and our own line only
WordPress.org security releases
lue aujourd’hui
no reuse clause found, 2026-11-07: link and our own line only
Drupal core security advisories
lue aujourd’hui
drupal.org/terms B.2 and I.1, read 2026-11-07: content CC BY-SA 2.0; links allowed if they suggest no endorsement
Drupal contributed-module security advisories
lue aujourd’hui
same as drupal-core
Wordfence
non utilisée : unread: the terms page answered 202 with an empty body on 2026-11-07
unread: the terms page answered 202 with an empty body on 2026-11-07
Shopify developer changelog
non utilisée : no working feed found on 2026-11-07
no working feed found on 2026-11-07