Windows

Windows 11 22H2 will receive security updates only after Feb. 27, 2024

Do Son November 16, 2023

Windows 11 version 22H2 has recently received the Windows 11 Moment 4 update, imbued with an array...

Phasing Out NTLM: Windows 11’s Commitment to Kerberos Windows 11 25H2 mandatory update Windows 11 KB5074105 fix Windows 11 Performance, Misleading Claim Windows 11 Kerberos

Windows 11 25H2 mandatory update Windows 11 KB5074105 fix Windows 11 Performance, Misleading Claim Windows 11 Kerberos

Phasing Out NTLM: Windows 11’s Commitment to Kerberos

Do Son October 12, 2023

Microsoft has announced its phased intent to move away from NTLM authentication in Windows 11 in favor...

📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

or try free for 14 days →

CVE-2020-13125CVSS 7.2
An issue was discovered in the "Ultimate Addons for Elementor" plugin before 1.24.2 for WordPress, as exploited in...
Watchtower Verified📅 Updated: Oct 21, 2026
CVE-2020-13126CVSS 9.9
An issue was discovered in the Elementor Pro plugin before 2.9.4 for WordPress, as exploited in the wild...
Watchtower Verified📅 Updated: Oct 21, 2026
CVE-2019-20180CVSS 8.0
The TablePress plugin for WordPress is vulnerable to CSV Injection in versions up to and including 1.14 via...
Watchtower Verified📅 Updated: Oct 21, 2026
CVE-2012-20002CVSS 8.7
TinyMCE Thumbnail Gallery plugin for WordPress before 1.1.0 contains a path traversal vulnerability that allows unauthenticated attackers to...
Watchtower Verified📅 Updated: Oct 21, 2026
CVE-2012-20003CVSS 5.1
Custom Tables plugin for WordPress before 3.4.6 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to...
Watchtower Verified📅 Updated: Oct 21, 2026
CVE-2012-20004CVSS 5.1
K-news plugin for WordPress before 1.1.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject...
Watchtower Verified📅 Updated: Oct 21, 2026
CVE-2026-66373CVSS 7.5
Redis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE, allows remote code execution...
Admin intel📅 Updated: Oct 20, 2026
CVE-2026-96652CVSS 5.3
Plex Media Server before 1.43.3.10861 allows SSRF via '/player/timeline'. An attacker using any X-Plex-Token value can include a...
CISA KEV📅 Added to KEV: Oct 20, 2026

CVE-2026-71195CVSS 9.9
In OpenStack Manila before 23.0.1, multiple Manila API operations on public shares do not verify that the caller...
📅 Updated: Oct 21, 2026
CVE-2026-106173CVSS 9.8
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSIEM 7.5.0 may...
📅 Updated: Oct 21, 2026
CVE-2026-86471CVSS 9.3
An unvalidated runtime configuration value in Apache CouchDB 3.5.2 and below on all platforms allows a CouchDB server...
📅 Updated: Oct 21, 2026
CVE-2026-26846CVSS 9.8
Buffer Overflow vulnerability in WEINVEIW CO.,LTD EBPro v.6.10.01.510_20251022 allows a remote attacker to execute arbitrary code via the...
📅 Updated: Oct 21, 2026
CVE-2026-111281CVSS 9.3
Jooan JA-A12 IP cameras with firmware 009_20171107 and 05.02.31.105 contain a remote code execution vulnerability that allows unauthenticated...
📅 Updated: Oct 21, 2026
CVE-2026-113744CVSS 10.0
A security vulnerability has been detected in Tenda AC19 16.03.10.07. The impacted element is the function formSetFirewallCfg of...
📅 Updated: Oct 21, 2026
CVE-2026-57496CVSS 9.6
NetLicensing MCP Server is a natural-language interface that enables agentic applications to manage the software-licensing lifecycle in Labs64...
📅 Updated: Oct 21, 2026
CVE-2026-113342CVSS 9.6
Memory corruption in Network in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code...
📅 Updated: Oct 21, 2026