Cyber Security

Verizon DBIR 2025: Vulnerability Exploitation Surges, Third-Party Breaches Double Data breach report Vulnerability exploitation

Data breach report Vulnerability exploitation

Verizon DBIR 2025: Vulnerability Exploitation Surges, Third-Party Breaches Double

Do Son April 24, 2025

The 2025 Verizon Data Breach Investigations Report (DBIR) has brought to light some important shifts in the...

WormLocker Ransomware Reemerges with Updated Variants

WormLocker Ransomware Reemerges with Updated Variants

Do Son April 24, 2025

The WormLocker ransomware, first identified in 2021, is evolving. Thanks to recent analysis in the ANY.RUN sandbox,...

Microsoft to Disable ActiveX Controls in Office 365 and 2024 Microsoft Patch Tuesday CVE-2026-20805 RasMan Crash Flaw, 0patch Micropatch ASP.NET Core, HTTP smuggling Windows kernel Rust ActiveX, Microsoft 365

Microsoft Patch Tuesday CVE-2026-20805 RasMan Crash Flaw, 0patch Micropatch ASP.NET Core, HTTP smuggling Windows kernel Rust ActiveX, Microsoft 365

Microsoft to Disable ActiveX Controls in Office 365 and 2024

Do Son April 17, 2025

According to a product announcement released by Microsoft, the company plans to begin disabling all ActiveX controls...

U.S Energy Secretary: Cybersecurity is the top priority for power grids and nuclear facilities

U.S Energy Secretary: Cybersecurity is the top priority for power grids and nuclear facilities

Do Son February 13, 2018

U.S Energy Secretary Rick – Perry said recently during a visit to the U.S Savannah River nuclear site (referred...

📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

or try free for 14 days →

CVE-2014-125131CVSS 5.1
DedeCMS 5.6 and 5.7 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject script by...
Watchtower Verified📅 Updated: Oct 22, 2026
CVE-2015-20124CVSS 8.7
Aspose Importer & Exporter plugin for WordPress before 3.0 contains a path traversal vulnerability that allows unauthenticated attackers...
Watchtower Verified📅 Updated: Oct 22, 2026
CVE-2016-20102CVSS 5.1
JavaMelody before 1.60.0 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject script by supplying...
Watchtower Verified📅 Updated: Oct 22, 2026
CVE-2020-13125CVSS 7.2
An issue was discovered in the "Ultimate Addons for Elementor" plugin before 1.24.2 for WordPress, as exploited in...
Watchtower Verified📅 Updated: Oct 22, 2026
CVE-2020-13126CVSS 9.9
An issue was discovered in the Elementor Pro plugin before 2.9.4 for WordPress, as exploited in the wild...
Watchtower Verified📅 Updated: Oct 22, 2026
CVE-2019-20180CVSS 8.0
The TablePress plugin for WordPress is vulnerable to CSV Injection in versions up to and including 1.14 via...
Watchtower Verified📅 Updated: Oct 22, 2026
CVE-2026-66373CVSS 7.5
Redis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE, allows remote code execution...
Admin intel📅 Updated: Oct 20, 2026
CVE-2026-96652CVSS 5.3
Plex Media Server before 1.43.3.10861 allows SSRF via '/player/timeline'. An attacker using any X-Plex-Token value can include a...
CISA KEV📅 Added to KEV: Oct 20, 2026

CVE-2026-110264CVSS 10.0
An issue has been discovered in GitLab CE/EE affecting all versions from 7.0 before 18.11.13, 19.0 before 19.0.10,...
📅 Updated: Oct 22, 2026
CVE-2026-91403CVSS 9.1
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java...
📅 Updated: Oct 21, 2026
CVE-2026-105944CVSS 10.0
Apache Pulsar Manager is a web console for administering Apache Pulsar clusters. It has its own user accounts...
📅 Updated: Oct 21, 2026
CVE-2026-114509CVSS 9.2
Laravel is a web application framework. Prior to 12.68.0 and 13.29.0, TokenGuard configured as a standard token-based API...
📅 Updated: Oct 21, 2026
CVE-2026-114383CVSS 10.0
A weakness has been identified in TOTOLINK EX200 5.2.3c.7200. This impacts the function setWiFiAclAddConfig of the file /cgi-bin/cstecgi.cgi...
📅 Updated: Oct 21, 2026
CVE-2026-114382CVSS 10.0
A security flaw has been discovered in TOTOLINK EX200 5.2.3c.7200. This affects the function setStaticDhcpConfig of the file...
📅 Updated: Oct 21, 2026
CVE-2026-96620CVSS 9.2
Claude Agent SDK is a Python SDK for Claude Code. Prior to 0.2.121, the resume option is passed...
📅 Updated: Oct 21, 2026
CVE-2026-96639CVSS 9.8
Pillow is a Python imaging library. From 11.0.0 until 13.0.0, multi-frame loaders can retain an ImagingCore allocation created...
📅 Updated: Oct 21, 2026