Vulnerability: Prioritize CVEs by Real-World Risk
The Vulnerability section answers one question: of all the CVEs out there, which ones should you care about today. It combines severity, exploit availability, exploitation evidence, and news signal into a single threat score, so you can patch by real risk instead of by CVSS alone.
CVEs here connect to the rest of your hunting. Exploit code tied to a CVE often turns up in AttackCapture directories, the families weaponizing it live in Malware, and the servers running those families sit in C2 Infrastructure. Look up a specific CVE from Search, or pull exploited infrastructure from Feeds.
Open Vulnerability from the Hunting group in the sidebar. It has these sub-sections: Daily Digest, Top Threats, Weaponized, and Listing.
Daily Digest
The Daily Digest is "what is dangerous in the last few days," with a lookback you can adjust. It groups what is moving into tabs: Hot in news, Reddit, New KEV, and New Exploits and POCs. Each CVE card carries its badges (KEV, Exploit), its threat score, CVSS, and EPSS, and a link to the source driving the attention. Use it as a short daily read to catch what is being actively discussed and exploited.
Top Threats
Top Threats ranks CVEs by threat score, the platform's risk ranking. The table shows the CVE, a short description, severity, the threat score, CVSS, EPSS, and signals such as KEV and Nuclei coverage. Filter by CVE and sort by any column. This is the list to work down when you are deciding what to fix first.
Weaponized
Weaponized is the sharp end: CVEs that are actively exploited (in CISA KEV) and have public exploit code. The table shows when each was added to KEV, its description, severity, threat score, and whether it is in KEV and NVD. By default it covers CVEs added to KEV in the last 30 days with public exploit code, which is about as close to "patch this now" as a list gets.
Listing
The Listing is the full, searchable CVE dataset behind the other three views, for when you want to look something specific up rather than browse a ranked slice.
Vulnerability: Prioritize CVEs by Real-World Risk
The Vulnerability section answers one question: of all the CVEs out there, which ones should you care about today. It combines severity, exploit availability, exploitation evidence, and news signal into a single threat score, so you can patch by real risk instead of by CVSS alone.
CVEs here connect to the rest of your hunting. Exploit code tied to a CVE often turns up in AttackCapture directories, the families weaponizing it live in Malware, and the servers running those families sit in C2 Infrastructure. Look up a specific CVE from Search, or pull exploited infrastructure from Feeds.
Open Vulnerability from the Hunting group in the sidebar. It has these sub-sections: Daily Digest, Top Threats, Weaponized, and Listing.
Daily Digest
The Daily Digest is "what is dangerous in the last few days," with a lookback you can adjust. It groups what is moving into tabs: Hot in news, Reddit, New KEV, and New Exploits and POCs. Each CVE card carries its badges (KEV, Exploit), its threat score, CVSS, and EPSS, and a link to the source driving the attention. Use it as a short daily read to catch what is being actively discussed and exploited.
Top Threats
Top Threats ranks CVEs by threat score, the platform's risk ranking. The table shows the CVE, a short description, severity, the threat score, CVSS, EPSS, and signals such as KEV and Nuclei coverage. Filter by CVE and sort by any column. This is the list to work down when you are deciding what to fix first.
Weaponized
Weaponized is the sharp end: CVEs that are actively exploited (in CISA KEV) and have public exploit code. The table shows when each was added to KEV, its description, severity, threat score, and whether it is in KEV and NVD. By default it covers CVEs added to KEV in the last 30 days with public exploit code, which is about as close to "patch this now" as a list gets.
Listing
The Listing is the full, searchable CVE dataset behind the other three views, for when you want to look something specific up rather than browse a ranked slice.
Vulnerability: Prioritize CVEs by Real-World Risk
The Vulnerability section answers one question: of all the CVEs out there, which ones should you care about today. It combines severity, exploit availability, exploitation evidence, and news signal into a single threat score, so you can patch by real risk instead of by CVSS alone.
CVEs here connect to the rest of your hunting. Exploit code tied to a CVE often turns up in AttackCapture directories, the families weaponizing it live in Malware, and the servers running those families sit in C2 Infrastructure. Look up a specific CVE from Search, or pull exploited infrastructure from Feeds.
Open Vulnerability from the Hunting group in the sidebar. It has these sub-sections: Daily Digest, Top Threats, Weaponized, and Listing.
Daily Digest
The Daily Digest is "what is dangerous in the last few days," with a lookback you can adjust. It groups what is moving into tabs: Hot in news, Reddit, New KEV, and New Exploits and POCs. Each CVE card carries its badges (KEV, Exploit), its threat score, CVSS, and EPSS, and a link to the source driving the attention. Use it as a short daily read to catch what is being actively discussed and exploited.
Top Threats
Top Threats ranks CVEs by threat score, the platform's risk ranking. The table shows the CVE, a short description, severity, the threat score, CVSS, EPSS, and signals such as KEV and Nuclei coverage. Filter by CVE and sort by any column. This is the list to work down when you are deciding what to fix first.
Weaponized
Weaponized is the sharp end: CVEs that are actively exploited (in CISA KEV) and have public exploit code. The table shows when each was added to KEV, its description, severity, threat score, and whether it is in KEV and NVD. By default it covers CVEs added to KEV in the last 30 days with public exploit code, which is about as close to "patch this now" as a list gets.
Listing
The Listing is the full, searchable CVE dataset behind the other three views, for when you want to look something specific up rather than browse a ranked slice.
Frequently asked questions
Frequently asked questions
How does Hunt.io decide which CVEs are most dangerous?
How often does the Daily Digest update?
What are KEV, CVSS, and EPSS?
What does Weaponized mean here?
Related
Related
Hunt adversary infrastructure in real time. Surface C2 servers, enrich IOCs,
and map attacker activity at scale with our unified threat hunting platform.
Hunt adversary infrastructure in real time. Surface C2 servers, enrich IOCs,
and map attacker activity at scale with our unified threat hunting platform.
Hunt adversary infrastructure in real time. Surface C2 servers, enrich IOCs,
and map attacker activity at scale with our unified threat hunting platform.