CVE-2023-23368

Critical QNAP NAS Vulnerabilities Allow Remote Code Execution

Do Son November 3, 2023

QNAP NAS devices are popular among businesses and consumers alike for their ease of use and reliability....

📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

or try free for 14 days →

CVE-2026-116690CVSS 7.5
MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From...
Admin intel📅 Updated: Oct 28, 2026
CVE-2026-101767CVSS 9.8
Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported versions that are...
Admin intel📅 Updated: Oct 28, 2026
CVE-2020-13125CVSS 7.2
An issue was discovered in the "Ultimate Addons for Elementor" plugin before 1.24.2 for WordPress, as exploited in...
Watchtower Verified📅 Updated: Oct 28, 2026
CVE-2020-13126CVSS 9.9
An issue was discovered in the Elementor Pro plugin before 2.9.4 for WordPress, as exploited in the wild...
Watchtower Verified📅 Updated: Oct 28, 2026
CVE-2019-20180CVSS 8.0
The TablePress plugin for WordPress is vulnerable to CSV Injection in versions up to and including 1.14 via...
Watchtower Verified📅 Updated: Oct 28, 2026
CVE-2012-20005CVSS 5.1
SocialFit plugin for WordPress through 1.2.2 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject...
Watchtower Verified📅 Updated: Oct 28, 2026
CVE-2016-20101CVSS 9.2
Issuu Panel plugin for WordPress before 1.6.6 contains a PHP file inclusion vulnerability that allows unauthenticated attackers to...
Watchtower Verified📅 Updated: Oct 28, 2026
CVE-2016-20097CVSS 8.7
Weaver (Fanwei) E-cology 8.0 contains a SQL injection vulnerability in the SignatureDownLoad servlet that allows unauthenticated remote attackers...
Watchtower Verified📅 Updated: Oct 28, 2026

CVE-2026-97631CVSS 9.5
EDK2 contains a vulnerability in BIOS where a user may cause “Out-of-bounds Write”, Classic Buffer Overflow, and “Incorrect...
📅 Updated: Oct 28, 2026
CVE-2026-113736CVSS 9.3
A vulnerability has been found in D-Link DHP-W610AV 1.02EUb03. The impacted element is the function login_prepare_hnap of the...
📅 Updated: Oct 28, 2026
CVE-2026-44179CVSS 9.9
XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. From 1.13 until...
📅 Updated: Oct 28, 2026
CVE-2026-114278CVSS 9.8
The che-machine-exec service constructs a shell command by concatenating user-controlled input (the username and namespace fields from the...
📅 Updated: Oct 28, 2026
CVE-2026-115904CVSS 9.6
Topluyo is a social networking platform. A vulnerability exists in Topluyo Desktop for Linux prior to version 2026.9.2410...
📅 Updated: Oct 28, 2026
CVE-2026-116692CVSS 9.8
MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From...
📅 Updated: Oct 28, 2026
CVE-2026-110879CVSS 9.8
jackson-databind validates the outer class of a class-name type ID but accepts attacker-selected classes inside its generic arguments,...
📅 Updated: Oct 28, 2026
CVE-2026-113672CVSS 9.9
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 0.9.0 until 3.3.15, 3.4.10, 3.5.4, and...
📅 Updated: Oct 28, 2026