Sources
CISA Known Exploited Vulnerabilities (attacks seen in the wild, with federal patch deadlines), NVD for newly published critical CVEs and affected products, FIRST EPSS for 30-day exploitation probability, public exploit code from Metasploit, Exploit-DB and the PoC-in-GitHub index, Microsoft's Patch Tuesday data for every Windows 10, 11 and Server CVE, NVD for the Linux kernel and core packages, and AlienVault OTX for the campaigns, threat actors and malware tied to each CVE.
A scheduled GitHub Actions job rebuilds every source every 30 minutes and redeploys this site. Private forums, paid broker markets and dark-web chatter are out of scope; pair this with a commercial threat-intel feed for that coverage.
Priority score (0–100)
Exploited in the wild +40, ransomware use +10, 3+ OTX campaigns in 30 days +4, named threat actor +2, CISA due within 3 days +8 (7 days +5). Metasploit module +12, Exploit-DB +9, GitHub PoC +6. EPSS × 20, CVSS × 1.4, network attack vector +3.
Red ≥ 75 · orange ≥ 55 · yellow ≥ 35.