CVE-2023-4863

Mitsubishi Electric Patches Four Critical ICONICS Suite Vulnerabilities

Mitsubishi Electric security advisory for ICONICS Suite vulnerabilities including CVE-2026-16438, CVE-2023-4863, and CVE-2026-16436

Mitsubishi Electric Patches Four Critical ICONICS Suite Vulnerabilities

Do Son October 16, 2026

Review the Mitsubishi Electric security advisory fixing critical ICONICS Suite vulnerabilities, including CVE-2026-16438 and CVE-2026-16436.

Multi-Microsoft products are vulnerable to CVE-2023-4863 and CVE-2023-5217 zero-day vulnerabilities Microsoft zero-day vulnerabilities

Microsoft zero-day vulnerabilities

Multi-Microsoft products are vulnerable to CVE-2023-4863 and CVE-2023-5217 zero-day vulnerabilities

Do Son October 3, 2023

Google and Microsoft confirmed that two zero-day vulnerabilities, CVE-2023-4863 and CVE-2023-5217 have been maliciously exploited in the wild

Google warns of critical Android RCE flaw exploited in the wild

Android RCE

Google warns of critical Android RCE flaw exploited in the wild

Do Son October 2, 2023

Google’s bulletin sheds light on two bugs, specifically CVE-2023-4863 and CVE-2023-4211, believed to be under limited targeted exploitation

CVE-2023-5129: Critical Heap Buffer Overflow Bug in libwebp Library Affects Major Browsers

CVE-2023-5129

CVE-2023-5129: Critical Heap Buffer Overflow Bug in libwebp Library Affects Major Browsers

Do Son September 26, 2023

Recognizing the depth of this security flaw, Google has assigned a fresh identity: CVE-2023-5129, alongside a daunting 10/10 severity rating

PoC released for Chrome zero-day CVE-2023-4863 vulnerability CVE-2023-4863 PoC

CVE-2023-4863 PoC

PoC released for Chrome zero-day CVE-2023-4863 vulnerability

Do Son September 22, 2023

The technical detail and proof-of-concept (PoC) exploit code has been published for a Chrome zero-day vulnerability tracked as CVE-2023-4863

CVE-2023-4863: Mozilla products 0-day vulnerability exploited in the wild Mozilla vulnerability

Mozilla vulnerability

CVE-2023-4863: Mozilla products 0-day vulnerability exploited in the wild

Do Son September 12, 2023

CVE-2023-4863 is a critical vulnerability in the libwebp component of Mozilla Products that could allow an attacker to execute arbitrary code

CVE-2023-4863: Critical Chrome 0-day Bug Under Active Attacks

CVE-2023-4863

CVE-2023-4863: Critical Chrome 0-day Bug Under Active Attacks

Do Son September 11, 2023

Identified as CVE-2023-4863, the vulnerability traces its origin to a heap buffer overflow in the WebP image format

📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

or try free for 14 days →

CVE-2026-98432CVSS 9.8
In the Linux kernel, the following vulnerability has been resolved: ipv4: free inet_opt and ireq_opt after an RCU...
Admin intel📅 Updated: Nov 4, 2026
CVE-2026-107441CVSS 8.8
An out-of-bounds write vulnerability in the CGI program of Zyxel GS1900-24E firmware versions through 2.90(AAHK.2)C0 could allow an...
Admin intel📅 Updated: Nov 4, 2026
CVE-2019-25779CVSS 7.5
The Diarise theme for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.5.9....
Watchtower Verified📅 Updated: Nov 4, 2026
CVE-2023-54413CVSS 6.1
The WPML plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the wp_lang parameter in versions up...
Watchtower Verified📅 Updated: Nov 4, 2026
CVE-2026-81648CVSS 10.0
The CryptoPayment Gateway WordPress plugin from 1.2.1 to 1.2.2 does not apply an authorization check on one of...
Admin intel📅 Updated: Nov 3, 2026
CVE-2026-119977CVSS 8.1
WordPress Core is vulnerable to Remote Code Execution in versions 4.7 through 7.1.3. This is due to predictable,...
CISA KEV📅 Added to KEV: Nov 3, 2026
CVE-2026-58115CVSS 10.0
A vulnerability has been identified in SIMATIC IoT2050 Advanced (6ES7647-0BA00-1YA2) (All versions < V4.3.4.1 running Industrial OS with...
Admin intel📅 Updated: Nov 2, 2026
CVE-2026-20051CVSS 7.4
A vulnerability with the Ethernet VPN (EVPN) Layer 2 ingress packet processing of Cisco Nexus 3600 Platform Switches...
Watchtower Verified📅 Updated: Nov 1, 2026

CVE-2026-121939CVSS 9.2
Databasement before 1.10.9 contains an authentication bypass vulnerability in OAuthService::findOrCreateLocalUser() that links OIDC identities to local users by...
📅 Updated: Nov 4, 2026
CVE-2026-119481CVSS 9.8
Incorrect Privilege Assignment vulnerability in Crocoblock JetFormBuilder jetformbuilder allows Privilege Escalation.This issue affects JetFormBuilder: from n/a through 3.6.7.1.
📅 Updated: Nov 4, 2026
CVE-2026-65555CVSS 9.8
Incorrect Privilege Assignment vulnerability in Uncanny Owl Uncanny Toolkit for LearnDash uncanny-learndash-toolkit allows Privilege Escalation.This issue affects Uncanny...
📅 Updated: Nov 4, 2026
CVE-2026-114425CVSS 9.2
SEPPmail Secure Email Gateway before 15.1.1 trusts a file path supplied in externally provided Large File Transfer attachment...
📅 Updated: Nov 4, 2026
CVE-2026-114424CVSS 9.2
SEPPmail Secure Email Gateway before 15.1.1 can evaluate attacker-influenced replacement text as Perl code in sender or recipient...
📅 Updated: Nov 4, 2026
CVE-2026-28336CVSS 9.9
SolarWinds Dameware was found to be affected by a command injection vulnerability that could lead to the compromise...
📅 Updated: Nov 4, 2026
CVE-2026-13594CVSS 9.1
Zoho Corporation's ManageEngine Log360 and EventLog Analyzer versions 13062 and below are vulnerable to an issue that could...
📅 Updated: Nov 4, 2026
CVE-2026-13214CVSS 9.8
The OCPP 1.6 client in subsys/net/lib/ocpp/ocpp_j.c contains a stack buffer overflow in parse_getconfig_msg(). When handling a GetConfiguration request...
📅 Updated: Nov 4, 2026