O que está sendo explorado agora
Avisos públicos recentes que citam software de sites que nossa análise reconhece. Cada linha leva à fonte. Ela descreve o software, nunca um site em particular, e não é um relatório sobre seu site.
2026-11-12
Canadian Centre for Cyber Security
Canadian Centre for Cyber Security publicou em 2026-11-12 um aviso que cita React.
https://cyber.gc.ca/en/alerts-advisories/react-security-advisory-av26-1152
2026-11-11
Drupal contributed-module security advisories
Mollie for Drupal - Moderately critical - Information disclosure - SA-CONTRIB-2026-329 (drupal.org, CC BY-SA 2.0)
2026-11-11
Drupal contributed-module security advisories
Mollie for Drupal - Moderately critical - Incorrect authorization - SA-CONTRIB-2026-328 (drupal.org, CC BY-SA 2.0)
2026-11-04
Drupal contributed-module security advisories
REST & JSON API Authentication for Drupal - Critical - Access bypass - SA-CONTRIB-2026-298 (drupal.org, CC BY-SA 2.0)
2026-11-04
Drupal contributed-module security advisories
GroupEx PRO ( Daxko ) integration - Critical - PHP object injection - SA-CONTRIB-2026-278 (drupal.org, CC BY-SA 2.0)
2026-11-03
Canadian Centre for Cyber Security
Canadian Centre for Cyber Security publicou em 2026-11-03 um aviso que cita WordPress.
https://cyber.gc.ca/en/alerts-advisories/wordpress-security-advisory-av26-1117
2026-11-03
CISA Known Exploited Vulnerabilities
WordPress WordPress Core Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability (CISA KEV catalogue, CC0)
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
2026-10-28
WordPress.org security releases
WordPress.org security releases publicou em 2026-10-28 um aviso que cita WordPress.
2026-10-26
CISA Known Exploited Vulnerabilities
PHP Memory Corruption Vulnerability (CISA KEV catalogue, CC0)
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
2026-10-26
CISA Known Exploited Vulnerabilities
PHP Stale Internal Request-State Vulnerability (CISA KEV catalogue, CC0)
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
2026-10-21
WordPress.org security releases
WordPress.org security releases publicou em 2026-10-21 um aviso que cita PHP.
https://wordpress.org/news/2026/10/critical-php-security-release/
Itens dos últimos 30 dias, no máximo 40, atualizados diariamente. Um nome aqui significa que o software pode aparecer num site; se seu site o usa, e em qual versão, é o que uma análise lê.
Fontes
CISA Known Exploited Vulnerabilities
lida hoje
CC0 1.0 per the LICENSE of github.com/cisagov/kev-data, read 2026-11-06
Canadian Centre for Cyber Security
lida hoje
canada.ca/en/transparency/terms.html, read 2026-11-07: commercial redistribution needs prior written permission, so we link and write our own line, never the title
Centre canadien pour la cybersécurité
lida hoje
same as cccs-en
CISA cybersecurity advisories
lida hoje
no reuse clause found on cisa.gov/privacy-policy, 2026-11-07: link and our own line only
WordPress.org security releases
lida hoje
no reuse clause found, 2026-11-07: link and our own line only
Drupal core security advisories
lida hoje
drupal.org/terms B.2 and I.1, read 2026-11-07: content CC BY-SA 2.0; links allowed if they suggest no endorsement
Drupal contributed-module security advisories
lida hoje
same as drupal-core
Wordfence
não usada: unread: the terms page answered 202 with an empty body on 2026-11-07
unread: the terms page answered 202 with an empty body on 2026-11-07
Shopify developer changelog
não usada: no working feed found on 2026-11-07
no working feed found on 2026-11-07