Skip to content
Noroxi

Anonymous

TrendAI Zero Day Initiative

162 credited records · 9 in the last 12 months · 1 in CISA KEV

Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.

Get told when this name is credited on a new CVE

If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.

Follow new records for Anonymous

When you'll hear from us

  • when this name is credited on a new CVE record

One daily email digest (06:00 UTC); connect a webhook for KEV listings and weaponized exploits every 10 minutes on paid plans, on the hour on the free plan.

Your free account also gets you

Running WordPress? Scan your site free with WP Lens

  • CVE alerts: add the products and versions you run, get the new CVEs that affect them
  • Uptime monitoring: 1 site, instant email when it goes down
  • Add your domain: subdomains and takeover risk scanned every week (1 domain)
  • 10 scans an hour on the security tools, at most 30 a day (3 a day without an account), an API key and MCP
  • All your scans in one panel: findings, what changed in the last scan, a report per domain or per client (PDF, share link)
All free tools

Sign up with email · Have an account? Sign in

Free account, no card. Unfollow any time.

Don't want an account? Get "Exploited this week" by email every Monday

Credited records

Researchers
  • CVE-2026-88812
    31Monitor

    X.Org Server XKB SetGeometry TextDoodad Double Free

    HighCVSS 7.8No exploitEPSS 0%

    x.org · xorg-x11-serverOct 27, 2026

  • CVE-2026-113583
    21Monitor

    Cypht 2.0.0 through 2.12.2 Stored DOM XSS via externalResources.js

    MediumCVSS 5.3No exploitEPSS 0%

    cypht-org · cyphtOct 20, 2026

  • CVE-2024-27123
    20Monitor

    A cross-site scripting (XSS) vulnerability has been reported to affect QcalAgent.

    MediumCVSS 5.2No exploitEPSS 0%

    qnap systems inc. · qcalagentSep 18, 2026

  • CVE-2026-49297
    32Monitor

    Apache Airflow Google provider: Path traversal via GCS object names → local/SFTP filesystem (GCSToSFTPOperator + GCSTimeSpanFileTransformOperator)

    HighCVSS 8.1No exploitEPSS 0%

    apache · apache-airflow-providers-googleJul 6, 2026

  • CVE-2026-42252
    36Monitor

    Apache Airflow: BashOperator Jinja2 injection via dag_run.conf — low-privilege user pattern

    CriticalCVSS 9.1No exploitEPSS 0%

    apache · airflowJun 1, 2026

  • CVE-2026-45361
    32Monitor

    Apache Airflow Google provider: SSH host key verification disabled in ComputeEngineSSHHook (paramiko AutoAddPolicy default)

    HighCVSS 8.1No exploitEPSS 0%

    apache · apache-airflow-providers-googleMay 25, 2026

  • CVE-2025-15024
    35Monitor

    RCE in Yordam Informatics' Library Automation System

    HighCVSS 8.8No exploitEPSS 0%

    yordam information technology consulting, training and electronic systems industry and trade inc. · library automation systemMay 14, 2026

  • CVE-2025-15023
    35Monitor

    Improper Access Control in Yordam Informatics' Library Automation System

    HighCVSS 8.8No exploitEPSS 0%

    yordam information technology consulting, training and electronic systems industry and trade inc. · library automation systemMay 14, 2026

  • CVE-2026-41446
    36Monitor

    WattBox 800 & 820 Series < 2.10.0.0 RCE via Diagnostic Endpoints

    CriticalCVSS 9.2No exploitEPSS 0%

    snap one, llc · wattbox 800Apr 28, 2026

  • CVE-2025-29887
    28Monitor

    A command injection vulnerability has been reported to affect QuRouter 2.5.1.

    HighCVSS 7.1No exploitEPSS 0%

    qnap · qurouterAug 29, 2025

  • CVE-2025-49223
    39Monitor

    billboard.js before 3.15.1 was discovered to contain a prototype pollution via the function generate, which could allow attackers to execute

    CriticalCVSS 9.8Proof of conceptEPSS 0%

    naver · billboard.jsJun 3, 2025

  • CVE-2025-0065
    31Monitor

    Improper Neutralization of Argument Delimiters in TeamViewer Clients

    HighCVSS 7.8No exploitEPSS 0%

    teamviewer · remote full clientJan 28, 2025

  • CVE-2024-38642
    4Monitor

    An improper certificate validation vulnerability has been reported to affect QuMagie.

    LowCVSS 1.0No exploitEPSS 0%

    qnap · qumagieSep 6, 2024

  • CVE-2024-21904
    26Monitor

    A path traversal vulnerability has been reported to affect several QNAP operating system versions.

    MediumCVSS 6.5No exploitEPSS 0%

    qnap · qtsSep 6, 2024

  • CVE-2023-3703
    39Monitor

    Proscend Advice ICR Series routers fw version 1.76

    CriticalCVSS 9.8No exploitEPSS 0%

    proscend · m357-5g firmwareSep 3, 2023

  • CVE-2023-27350
    99Now

    This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 (Build 63914).

    CriticalCVSS 9.8KEVWeaponizedEPSS 99%

    papercut · papercut mfApr 20, 2023

  • CVE-2022-43649
    31Monitor

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 12.0.2.12465.

    HighCVSS 7.8No exploitEPSS 1%

    foxit · pdf editorMar 29, 2023

  • CVE-2022-43633
    27Monitor

    This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers.

    MediumCVSS 6.8No exploitEPSS 1%

    dlink · dir-1935 firmwareMar 29, 2023

  • CVE-2022-43632
    27Monitor

    This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers.

    MediumCVSS 6.8No exploitEPSS 1%

    dlink · dir-1935 firmwareMar 29, 2023

  • CVE-2022-43631
    27Monitor

    This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers.

    MediumCVSS 6.8No exploitEPSS 1%

    dlink · dir-1935 firmwareMar 29, 2023

  • CVE-2022-43630
    35Monitor

    This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers.

    HighCVSS 8.8No exploitEPSS 0%

    dlink · dir-1935 firmwareMar 29, 2023

  • CVE-2022-43629
    27Monitor

    This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers.

    MediumCVSS 6.8No exploitEPSS 1%

    dlink · dir-1935 firmwareMar 29, 2023

  • CVE-2022-43628
    27Monitor

    This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers.

    MediumCVSS 6.8No exploitEPSS 0%

    dlink · dir-1935 firmwareMar 29, 2023

  • CVE-2022-43627
    27Monitor

    This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers.

    MediumCVSS 6.8No exploitEPSS 1%

    dlink · dir-1935 firmwareMar 29, 2023

  • CVE-2022-43626
    27Monitor

    This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers.

    MediumCVSS 6.8No exploitEPSS 1%

    dlink · dir-1935 firmwareMar 29, 2023