Skip to content
Noroxi

Cure53

13 credited records · 8 in the last 12 months · 0 in CISA KEV

Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.

Get told when this name is credited on a new CVE

If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.

Follow new records for Cure53

When you'll hear from us

  • when this name is credited on a new CVE record

One daily email digest (06:00 UTC); connect a webhook for KEV listings and weaponized exploits every 10 minutes on paid plans, on the hour on the free plan.

Your free account also gets you

Running WordPress? Scan your site free with WP Lens

  • CVE alerts: add the products and versions you run, get the new CVEs that affect them
  • Uptime monitoring: 1 site, instant email when it goes down
  • Add your domain: subdomains and takeover risk scanned every week (1 domain)
  • 10 scans an hour on the security tools, at most 30 a day (3 a day without an account), an API key and MCP
  • All your scans in one panel: findings, what changed in the last scan, a report per domain or per client (PDF, share link)
All free tools

Sign up with email · Have an account? Sign in

Free account, no card. Unfollow any time.

Don't want an account? Get "Exploited this week" by email every Monday

Credited records

Researchers
  • CVE-2026-63763
    30Monitor

    SurrealDB before 2.5.0 Privilege Escalation via Future Fields

    HighCVSS 7.5No exploitEPSS 0%

    surrealdb · surrealdbJul 20, 2026

  • CVE-2025-71398
    23Monitor

    SurrealDB before 2.2.2 SSRF via HTTP Redirect Bypass

    MediumCVSS 5.8No exploitEPSS 0%

    surrealdb · surrealdbJul 18, 2026

  • CVE-2025-71397
    28Monitor

    SurrealDB before 2.2.2 CPU Exhaustion via nested FOR loops

    HighCVSS 7.1No exploitEPSS 0%

    surrealdb · surrealdbJul 18, 2026

  • CVE-2025-71396
    9Monitor

    SurrealDB before 2.2.2 Denial of Service via JavaScript Scripting

    LowCVSS 2.3No exploitEPSS 0%

    surrealdb · surrealdbJul 18, 2026

  • CVE-2025-71395
    28Monitor

    SurrealDB before 2.2.2 Memory Exhaustion via string::replace

    HighCVSS 7.1No exploitEPSS 0%

    surrealdb · surrealdbJul 18, 2026

  • CVE-2025-71394
    9Monitor

    SurrealDB before 2.2.2 Local File Read via DEFINE ANALYZER

    LowCVSS 2.3No exploitEPSS 0%

    surrealdb · surrealdbJul 18, 2026

  • CVE-2025-71393
    24Monitor

    SurrealDB before 2.2.2 Memory Exhaustion via Nested Functions

    MediumCVSS 6.0No exploitEPSS 0%

    surrealdb · surrealdbJul 18, 2026

  • CVE-2025-71392
    37Monitor

    SurrealDB before 2.2.2 SurrealQL Injection via export

    CriticalCVSS 9.4No exploitEPSS 0%

    surrealdb · surrealdbJul 18, 2026

  • CVE-2024-9348
    35Monitor

    Docker Desktop before v4.34.3 allows RCE via unsanitized GitHub source link in Build view

    HighCVSS 8.9No exploitEPSS 0%

    docker · docker desktopOct 16, 2024

  • CVE-2024-8696
    35Monitor

    A remote code execution (RCE) vulnerability via crafted extension publisher-url/additional-urls could be abused by a malicious extension in Docker Desktop befor

    HighCVSS 8.9No exploitEPSS 1%

    docker · desktopSep 12, 2024

  • CVE-2024-8695
    36Monitor

    A remote code execution (RCE) vulnerability via crafted extension description/changelog could be abused by a malicious extension in Docker Desktop before 4.34.2

    CriticalCVSS 9.0No exploitEPSS 1%

    docker · desktopSep 12, 2024

  • CVE-2023-0633
    31Monitor

    In Docker Desktop on Windows before 4.12.0 an argument injection to installer may result in LPE

    HighCVSS 7.8No exploitEPSS 0%

    docker · docker desktopSep 25, 2023

  • CVE-2023-0627
    31Monitor

    Docker Desktop 4.11.x allows --no-windows-containers flag bypass

    HighCVSS 7.8No exploitEPSS 0%

    docker · docker desktopSep 25, 2023