ThreatAft@ThreatAftDisclosure
The tweet announces a mass disclosure of 13 CVEs affecting VM2 Sandbox, including CVE-2026-92956 (WebAssembly escape on Node.js 26) with CVSS 10.0, but provides no explicit PoC, exploit tool, active exploitation claims, or named patch/remediation beyond the #PatchNow hashtag (which does not qualify per analysis rules). The primary intent appears to be vulnerability disclosure.
ExploitGrid@exploitgridPoC
A curated list of critical (CVSS 10) CVEs with live Proof of Concept exploits available, covering GitLab RCE, Metabase, Craft CMS, and vm2 vulnerabilities.
ExploitGrid@exploitgridPoC
The text highlights several critical CVEs (all CVSS 10) with live Proof of Concept code available, including RCE vulnerabilities in GitLab, Metabase, Craft CMS, and vm2, but does not name specific exploit tools or confirm active in-the-wild exploitation.
ExploitGrid@exploitgridExploit
The text announces CVE-2026-92956 (CVSS 10, Critical) with both exploit and PoC labels, linking to exploit details hosted on exploitgrid.net.
ExploitGrid@exploitgridDisclosure
An ExploitGrid daily digest listing five high-severity CVEs (all CVSS 10) affecting CraftCMS, Metabase, GitLab, and a patriksimek package, providing CVSS scores and product names but no PoC links, named exploit tools, patches, or active exploitation evidence.
SecAlerts@SecAlertsCoPatch
The tweet discloses a critical vm2 sandbox escape (CVE-2026-92956, CVSS 10) exploitable via default VM instantiation on Node.js 26 and explicitly urges immediate patching or isolation.
