TechAni
Dark mode

Insights Lab

Live Signals

Threat surface, AI/ML signals.

Live

Threat Surface Pulse

Real-time snapshots from CISA KEV and other signals. Highlights exposed risk and trending CVEs.

  • Recent KEV additions
  • Exec-ready talking points
CVE-2023-46805Due 1/22/2024

Ivanti

Ivanti Connect Secure (ICS, formerly known as Pulse Connect Secure) and Ivanti Policy Secure gateways contain an authentication bypass vulnerability in the web component that allows an attacker to access restricted resources by bypassing control checks. This vulnerability can be leveraged in conjunction with CVE-2024-21887, a command injection vulnerability.

CVE-2024-21887Due 1/22/2024

Ivanti

Ivanti Connect Secure (ICS, formerly known as Pulse Connect Secure) and Ivanti Policy Secure contain a command injection vulnerability in the web components of these products, which can allow an authenticated administrator to send crafted requests to execute code on affected appliances. This vulnerability can be leveraged in conjunction with CVE-2023-46805, an authenticated bypass issue.

CVE-2023-23752Due 1/29/2024

Joomla!

Joomla! contains an improper access control vulnerability that allows unauthorized access to webservice endpoints.

CVE-2016-20017Due 1/29/2024

D-Link

D-Link DSL-2750B devices contain a command injection vulnerability that allows remote, unauthenticated command injection via the login.cgi cli parameter.

CVE-2023-41990Due 1/29/2024

Apple

Apple iOS, iPadOS, macOS, tvOS, and watchOS contain an unspecified vulnerability that allows for code execution when processing a font file.

← PrevPage 85 / 297Next →
Live

AI/ML Signal Tracker

Tracks model releases, repos, and outages; summarizes impact for platform roadmaps.

  • Top moving repos
  • Signal strength
← PrevPage 1 / 9Next →