Threat Intelligence Database
Comprehensive database of the latest cyber threats affecting organizations worldwide. Filter and search to find specific threat intelligence relevant to your organization.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threat Intelligence
Click on any threat for detailed analysis and mitigation recommendations
0 CVE-2026-110608 is an authorization bypass vulnerability in BizSpring Shop affecting the OrderController's cancel and receive handlers. Authenticated users can manipulate the orderId parameter to act on other users' orders, such as cancelling pending orders or confirming receipt of shipped orders without consent. This can disrupt order fulfillment and settlement processes. Join the discussion | CVE Database V5 | 10/14/2026, 14:16:49 UTC Added: 10/14/2026, 14:34:19 UTC |
0 BizSpring Shop through commit cf22d39daaf1 contains a payment verification bypass vulnerability that allows authenticated buyers to mark orders paid by calling the PaymentController.testPostPay handler. Attackers can generate a payment log via /member/payment/load and request /member/payment/test_post_pay_{paymentLogSn} to obtain goods without paying or settle other members' orders. Join the discussion | CVE Database V5 | 10/14/2026, 14:16:47 UTC Added: 10/14/2026, 14:34:19 UTC |
Showing 1 to 2 of 2 results