crackthe.net
Threats
The vulnerabilities that crack the net, the biggest cyberattacks, and attacks on industrial plants.
VulnerabilitiesFrom Code Red to PHP2Shell: the vulnerabilities that changed IT security, with severity, the timeline from report to attack, and the figures.
IT attacksThe cyberattacks with the largest confirmed impact, from crypto thefts to national outages, and the attacks on industrial control systems.
ICS attacksAttacks that reached industrial control systems, documented in public technical analyses: what happened, how the attackers got in, and what it did to the process.
Security ToolsVPN providers, password managers, private email, hardware wallets, and web security tools, each on a page of its own.
A vulnerability is a flaw in software or hardware. The timeline lists the flaws that hit large parts of the internet at once. An attack is a single case, such as a theft, a data breach, or an outage. If an attack ran through a flaw on the timeline, like the data thefts through MOVEit, it is covered on the page of that vulnerability.
Every vulnerability on the timeline
| Name | Year | CVSS |
|---|---|---|
| PHP2Shell | 2026 | 9.8 |
| MOVEit Transfer | 2023 | 9.8 |
| Log4Shell | 2021 | 10.0 |
| ProxyLogon | 2021 | 9.8 |
| Citrix ADC | 2019 | 9.8 |
| Exim | 2019 | 9.8 |
| MikroTik Winbox | 2018 | 9.1 |
| Meltdown | 2018 | 5.6 |
| Spectre | 2018 | 5.6 |
| NotPetya | 2017 | 8.8 |
| WannaCry | 2017 | 8.8 |
| Shellshock | 2014 | 9.8 |
| Heartbleed | 2014 | 7.5 |
| NTP monlist | 2014 | 5.0 |
| Conficker | 2008 | 10.0 |
| Kaminsky DNS flaw | 2008 | 6.8 |
| Blaster | 2003 | 7.5 |
| SQL Slammer | 2003 | 7.5 |
| Nimda | 2001 | 7.5 |
| Code Red | 2001 | 10.0 |
CVSS base scores from the US National Vulnerability Database. Older entries carry version 2 scores, which use a different scale.