OpenSSH
sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authenticati…
For IT support and MSPs
Your Customers Kit, Exploited Flaws First
Tick what your customers run. Get the flaws in it each week, with anything on CISA's exploited list at the top.
Free · No account · One-click unsubscribe
Why It Works
/ 01
CISA's List Built In
Flaws attackers are using come first. The KEV page has CISA's fix-by dates.
/ 02
Urgent Alerts in Half an Hour
An exploited or 9+ flaw in your stack reaches you within half an hour.
/ 03
Plain Enough to Forward
Each flaw has a verdict a customer can follow.
The past month
What You'd Have Heard About
Linux kernel
In the Linux kernel, the following vulnerability has been resolved: net: skbuff: preserve shared-frag marker during coales…
Linux kernel
In the Linux kernel, the following vulnerability has been resolved: scsi: libiscsi: Reject a negative task index from pars…
OpenSSH
Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.
Bobble Solutions
See Server Monitoring ›
White-Label Server Monitoring
Bobble Solutions watches each customer server itself and sends reports under your name.
Questions
FAQ
Does it cover Windows and network kit?
Not as stacks yet: it covers Linux, web servers, databases and web apps. The CISA KEV page lists every exploited flaw, Windows and Cisco included.
Can I search the exploited list?
Yes. The CISA KEV page has the whole catalogue, searchable by vendor and product.
Can I white-label this?
Not CVE Hawk itself. Bobble Solutions does white-label server monitoring and reports.