basicsecurity.net
Proof, not just disclosure.
Threats / Contributors / CERT/CC
Registry & coordination contributor

CERT/CC

cited as evidence in 1 · CNA assigner on 7 (independent) · credited finder on 1 of 9 known-exploited records. Every aggregate on this page is recomputed from the records listed below — each one already cited to its public source.

kb.cert.org ↗ · home of the cited advisories

Independent CNA
9
records cited in
deterministic count
1
finder / reporter credits
CVE.org credits
7
CVE records catalogued (CNA)
independent
70%
avg modeled exploit prob.
FIRST EPSS, 9/9
0%
ransomware-associated
0 of 9 · CISA flag
R

Roles across the work

— find / fix / exploit / catalog, computed per record from credit type, the vendor-self-CNA gate, and the linked public exploit catalog
1
Find
record(s)
0
Fix
record(s)
0
Exploit
record(s)
7
Catalog
record(s)

Each dimension is a count of the listed records where this contributor did that job. A CNA row is fix only when the affected product is the assigner’s own; registries, coordinators, platforms, intel and research houses read as catalog, never fix. Exploit counts records where this contributor is credited as author of a public exploit / detection template in a linked catalog — we link the catalog, never host a payload.

01

Known for

— recomputed from this contributor’s own records
SurfacesApplication / other (6), Edge / remote-access infra (2), Server / web platform (1)
WeaknessInjection (4), Memory safety (1), Authentication (1), Path traversal / file (1)
PortfolioMicrosoft (1), Adobe (1), PHP (1), NETGEAR (1), ImageMagick (1), SolarWinds (1)
PeopleNamed individuals credited under this contributor:
Will Dormann of CERT/CC
02

Narrative reach

— how far this contributor’s records carry an attacker, front door → lights out
1Front door
9reach this stage
→
2Keys to the kingdom
9reach this stage
→
3Lateral reach
9reach this stage
→
4Data at risk
0reach this stage
→
5Lights out
0reach this stage

Furthest any of these records carries an attacker: 3 · Lateral reach. 0 of 9 narrative-framed records reach data-at-risk or lights-out. (furthest-position idiom, reused from the landing map; the stage mapping is a model output over cited evidence.)

03

Recent highlights

— this contributor’s newest known-exploited records
04

Every record they’re cited in

— all 9, each linked to its cited source

This is the evidence behind every number above. Sorted ransomware-first, then by modeled exploit probability.

05

Coverage & confidence

— what this profile claims, and what it does not

Established (cited)

  • Cited in 9 known-exploited records — the list below; every one links to its public source.
  • Catalogued 7 CVE record(s) as the CNA assigner (from CVE.org).
  • Credited as the finder/reporter on 1 record(s) (CVE.org credits).
  • Coverage gaps — stated, not hidden

  • This profile is an aggregation: it asserts only what the listed records already cite — no new external claim about the contributor is made.
  • The TYPE badge and the narrative-stage mapping are editorial (our call), labeled as such, not a sourced fact.