Check vulnerabilities

CVE exploitation data check using “IntheWild”

There are tens of thousands of vulnerabilities disclosed each year. Only a handful of them will ever be exploited.

Triaging vulnerabilities is hard, one thing is easy though: if you know something is actively exploited inTheWild you have to move within hours.

We believe that exploitation information is about safety and it should be easy to access and not be behind paywalls.

Get alerts on new reports of exploitation via RSS, Twitter, grab our docker image, the hourly database exports or get the full exploited list a /api/exploited

Most recently

exploited

in the wild

Vulnerability Feeds

CVE-2022-2294

Data reported first

07/04/2022

This vulnerability has not been published at NVD yet. This is normal, it does often take NVD time to publish vulnerabilities as they only publish confirmed ones. If a vulnerability is found in the wild often the report will be much earlier than NVD publishes the vulnerability

Reference

Credit

CVE-2022-26134

Data reported first

05/31/2022

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an unauthenticated attacker to execute arbitrary code on a Confluence Server or Data Center instance. The affected versions are from 1.3.0 before 7.4.17, from 7.13.0 before 7.13.7, from 7.14.0 before 7.14.3, from 7.15.0 before 7.15.2, from 7.16.0 before 7.16.4, from 7.17.0 before 7.17.4, and from 7.18.0 before 7.18.1.

Reference

Credit

CVE-2022-30190

Data reported first

05/30/2022

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability.

Reference

Credit

Thanks for the exploitation information!disclaimer

Know when

to panic

Get alerts for new exploited vulnerabilities

Be informed about the few vulnerabilities that really matter. Subscribe to the RSS and hook it up to your alerts channel, follow us on Twitter or look at our feed or API about new exploitations.

Prioritize vulnerabilities

Your vulnerability scanners probably return thousands of vulnerabilities. Triaging and prioritizing them is hard. Use our hourly database export or directly the our CLI to enrich your reports about exploits and exploitation activity.

Find Exploits

Need to verify a vulnerability or the exploit you found seems to be broken. We collect exploits from a number of different sources and do the github scouring for you. Check out the report page or automate your searches using the CLI.

Share exploitation information

If you identified a new exploitation activity during research or just saw some reports are missing from out database, you can Tweet @inthewildio or similarly tag us in you LinkedIn post. You can also just use this form.

Help the Community Move Fast.

Contribute Now!

Contribute

How to

Contribute

As simple as writing a tweet

Add a @inthewildio tag

Add the #cancreditme hashtag

Add a vulnerabilityId (if any) #cve_2020_17049

Add a type #exploitedinthewild

Post about it

Add a @inthewildio tag

Add the #cancreditme hashtag

Add a vulnerabilityId (if any) #cve_2020_17049

Add a type #exploitedinthewild