Investigate real vulnerabilities with AI guidance. Every major CVE is MITRE-tagged, CVSS-scored, and paired with an Evidence Mode investigation — so you understand the threat, not just the patch number.
WordPress OTP Plugin Skips Authentication Verification
Unauthenticated Reflected XSS in FunnelKit WordPress Plugin
Unauthenticated Remote Code Execution via ZeroMQ Pickle Deserialization
Redux Framework Privilege Escalation via User Meta Manipulation
Unauthenticated Account Takeover via Forged Cart Recovery Tokens
WordPress Digits Plugin Missing Authorization Enables Admin Privilege Escalation
Spring Authorization Server Authentication Bypass Vulnerability
Unauthenticated Remote Code Execution via SetParameter Input Sanitization
WordPress Loco Translate Plugin CSRF Leading to RCE
Unauthenticated Remote Command Execution via Origin Verification Bypass
WordPress Automator Plugin Arbitrary File Deletion Flaw
Unauthenticated SSRF in stoatchat Proxy Endpoints
WordPress WPFunnels Plugin Privilege Escalation via Unvalidated Options
WordPress Breakdance Plugin Stored XSS via Fields Parameter
HCL DFXServer Broken Authentication via Direct API Access
APT Source List Injection via Unvalidated Server Response
PipeWire Sandbox Escape via Malicious Library Loading
Ruby Code Injection via OpenAPI Schema String Interpolation
HCL DFXServer Authentication Bypass via Response Manipulation
OS Command Injection in AVideo FFmpeg Process Management
AVideo OS Command Injection via FFmpeg Parameter Concatenation
Unsanitized Enum Descriptions Enable Code Injection in Kiota
Grav Flex Objects Server-Side Template Injection via Frontmatter
Path Traversal Enables Arbitrary Script Execution in PraisonAI
Grav API Plugin Open Redirect in Password Reset
Grav Form Plugin Path Traversal via Twig Template Processing
Path Traversal in TAR Archive Extraction Enables Arbitrary File Write
Insecure DLL Loading in HYPER SBI 2 Installer
SQL Injection in Apache Fineract Report Execution API
SQL Injection in Apache Fineract Client Search API
Casky's multi-agent pipeline uses CVE context to generate a structured investigation plan before a single skill runs. Run your first investigation free — no simulation, your actual security work.
Start investigating CVEs free →© 2026 Casky.AI, Inc. · AI Security Investigation