PLC Security

Siemens Warns of Eight Unpatched SIMATIC S7-1500 Web Server Flaws Rated Up to CVSS 9.4

Siemens S7-1500 vulnerabilities cross-site scripting in SIMATIC PLC web server trace files

Siemens Warns of Eight Unpatched SIMATIC S7-1500 Web Server Flaws Rated Up to CVSS 9.4

Do Son October 13, 2026

TL;DR Siemens disclosed eight Siemens S7-1500 vulnerabilities in the PLC web server on October 13, 2026. Three...

MicroLogix 1400 Attacks Lock Operators Out of Water Utility PLCs MicroLogix 1400 attacks on internet-exposed PLCs at water utilities

MicroLogix 1400 attacks on internet-exposed PLCs at water utilities

MicroLogix 1400 Attacks Lock Operators Out of Water Utility PLCs

Do Son July 31, 2026

TL;DR Attackers are hijacking internet-exposed MicroLogix 1400 controllers at U.S. water utilities. They change device IP addresses...

Critical-Severity XSS Flaws Uncovered in Siemens SIMATIC S7 Web Servers Siemens SIMATIC S7 Vulnerability Industrial PLC XSS CVE-2024-44102 - Siemens TeleControl Server Basic

Siemens SIMATIC S7 Vulnerability Industrial PLC XSS CVE-2024-44102 - Siemens TeleControl Server Basic

Critical-Severity XSS Flaws Uncovered in Siemens SIMATIC S7 Web Servers

Do Son May 13, 2026

Siemens ProductCERT issued an urgent security advisory regarding multiple Cross-Site Scripting (XSS) vulnerabilities found within the web...

Critical Alert: Iranian-Affiliated Actors Target U.S. Infrastructure via Industrial Control Systems Harvester APT Linux Backdoor OT Cyberattack Iranian APT Operation Olalampo MuddyWater APT Prince of Persia APT, Tonnerre v50 Patchwork APT, DLL Sideloading Subtle Snail, cyber espionage ShadowSilk, cyber espionage Volt Typhoon APT Group - Chinese Cybersecurity Firm

Harvester APT Linux Backdoor OT Cyberattack Iranian APT Operation Olalampo MuddyWater APT Prince of Persia APT, Tonnerre v50 Patchwork APT, DLL Sideloading Subtle Snail, cyber espionage ShadowSilk, cyber espionage Volt Typhoon APT Group - Chinese Cybersecurity Firm

Critical Alert: Iranian-Affiliated Actors Target U.S. Infrastructure via Industrial Control Systems

Do Son April 8, 2026

In a major joint advisory released on April 7, 2026, a coalition of U.S. federal agencies—including the...

📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

or try free for 14 days →

CVE-2012-20005CVSS 5.1
SocialFit plugin for WordPress through 1.2.2 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject...
Watchtower Verified📅 Updated: Oct 28, 2026
CVE-2015-20123CVSS 8.7
Aspose Doc Exporter plugin for WordPress before 2.0 contains a path traversal vulnerability that allows unauthenticated attackers to...
Watchtower Verified📅 Updated: Oct 28, 2026
CVE-2016-20101CVSS 9.2
Issuu Panel plugin for WordPress before 1.6.6 contains a PHP file inclusion vulnerability that allows unauthenticated attackers to...
Watchtower Verified📅 Updated: Oct 28, 2026
CVE-2020-13125CVSS 7.2
An issue was discovered in the "Ultimate Addons for Elementor" plugin before 1.24.2 for WordPress, as exploited in...
Watchtower Verified📅 Updated: Oct 27, 2026
CVE-2020-13126CVSS 9.9
An issue was discovered in the Elementor Pro plugin before 2.9.4 for WordPress, as exploited in the wild...
Watchtower Verified📅 Updated: Oct 27, 2026
CVE-2019-20180CVSS 8.0
The TablePress plugin for WordPress is vulnerable to CSV Injection in versions up to and including 1.14 via...
Watchtower Verified📅 Updated: Oct 27, 2026
CVE-2026-102785CVSS 10.0
Joomla Extension - yootheme.com - Unauthenticated remote code execution in YOOtheme Pro 5.0.0-5.0.52 - YOOtheme Pro’s publicly accessible...
Admin intel📅 Updated: Oct 27, 2026
CVE-2026-48356CVSS 9.3
Adobe Commerce is affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in...
CISA KEV📅 Added to KEV: Oct 27, 2026

CVE-2026-48356CVSS 9.3
Adobe Commerce is affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in...
CISA KEV📅 Added to KEV: Oct 27, 2026📅 Updated: Oct 27, 2026
CVE-2026-111497CVSS 9.2
A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all...
CISA KEV📅 Added to KEV: Oct 27, 2026📅 Updated: Oct 27, 2026
CVE-2026-112352CVSS 9.1
Sunhillo SureLine before 9.1.5 contains an authentication bypass vulnerability that allows an unauthenticated remote attacker to impersonate any...
📅 Updated: Oct 27, 2026
CVE-2024-31026CVSS 9.8
An issue in Greek Universities Network (GUnet) Open eClass Platform v.3.15 allows a remote attacker to execute arbitrary...
📅 Updated: Oct 27, 2026
CVE-2024-34320CVSS 9.8
ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain an incorrect access control issue in sensitive API endpoints.
📅 Updated: Oct 27, 2026
CVE-2024-34323CVSS 10.0
ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain an Insecure Direct Object Reference (IDOR) via the usrLogin$hdnPFID parameter....
📅 Updated: Oct 27, 2026
CVE-2024-4457CVSS 9.1
The Management Console fails to properly validate input related to the configuration of JDBC user stores. This weakness...
📅 Updated: Oct 27, 2026
CVE-2026-105008CVSS 9.0
No cwe for this issue in Windows Schannel allows an unauthorized attacker to perform spoofing over a network.
📅 Updated: Oct 27, 2026