Threat Intelligence Database
Comprehensive database of the latest cyber threats affecting organizations worldwide. Filter and search to find specific threat intelligence relevant to your organization.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threat Intelligence
Click on any threat for detailed analysis and mitigation recommendations
GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in *nix systems or through the browser. Prior to 1.11, the parse_ios() function uses an attacker-controlled keyword-to-OS offset as both the source offset and copy length for memmove, allowing a crafted User-Agent in a processed access log to read up to approximately 4 KB beyond the heap allocation and conditionally crash GoAccess. This issue is fixed in version 1.11. Join the discussion | CVE Database V5 | 07/30/2026, 20:37:40 UTC Added: 07/30/2026, 21:07:58 UTC |
0 CVE-2026-55768 is a high-severity vulnerability in the GoAccess real-time web log analyzer prior to version 1.11. It involves improper handling of WebSocket frame lengths, where a 64-bit extended frame length is narrowed to a signed 32-bit field without proper enforcement, allowing an unauthenticated remote attacker to trigger an excessive memory allocation of approximately 18 exabytes. This causes the process to terminate unexpectedly. The issue is fixed in GoAccess version 1.11. Join the discussion | CVE Database V5 | 07/30/2026, 20:34:32 UTC Added: 07/30/2026, 21:07:58 UTC |
CVE-2026-54715 is a heap-based buffer overflow vulnerability in GoAccess version 1.10.2. The flaw occurs in the parse_browser function, which incorrectly handles a crafted User-Agent string starting with 'Opera', allowing an attacker to write beyond the allocated heap buffer. This can lead to corruption or crashing of the GoAccess application. The issue is fixed in version 1.11. Join the discussion | CVE Database V5 | 07/30/2026, 20:23:36 UTC Added: 07/30/2026, 20:38:29 UTC |
Showing 1 to 3 of 3 results