Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

CVE Database V5

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

itsourcecode-Online_Student_Enrollment_System

A SQL injection vulnerability was found in the scheduleSubList.php file of itsourcecode Online Student Enrollment System v1.0. The reason for this issue is that the 'subjcode' parameter is directly embedded into the SQL query via string interpolation without any sanitization or validation.

The vulnerability CVE-2026-36235 involves SQL injection in the scheduleSubList.php component of itsourcecode Online Student Enrollment System v1.0. The 'subjcode' parameter is incorporated into SQL statements via string interpolation without input validation or sanitization, which allows an attacker to inject arbitrary SQL commands. The CVSS v3.1 base score is 9.8 (critical), reflecting network attack vector, low attack complexity, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability. No patch or official remediation has been published, and no known exploits are reported in the wild.

Detailed information about CVE-2026-36235: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2026-36235: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-36235: n/a

itsourcecode Online Student Enrollment System v1.0 is vulnerable to SQL Injection in newCourse.php via the 'coursename' parameter.

CVE-2026-36234 is a critical SQL Injection vulnerability affecting itsourcecode Online Student Enrollment System v1.0. The flaw exists in the 'coursename' parameter of the newCourse.php script, which does not properly sanitize user input before incorporating it into SQL queries. This allows remote attackers to execute arbitrary SQL commands without authentication, impacting confidentiality, integrity, and availability. The vulnerability has a CVSS 3.1 score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). No patch or remediation level has been published by the vendor, and no known exploits have been reported.

Detailed information about CVE-2026-36234: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2026-36234: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-36234: n/a

A SQL injection vulnerability was found in the instructorClasses.php file of itsourcecode Online Student Enrollment System v1.0. The reason for this issue is that the 'classId' parameter from $_GET['classId'] is directly concatenated into the SQL query without any sanitization or validation.

This vulnerability is a classic SQL injection (CWE-89) caused by improper handling of the 'classId' parameter in the instructorClasses.php file of the itsourcecode Online Student Enrollment System v1.0. The parameter is taken directly from the HTTP GET request and concatenated into an SQL query without any input validation or sanitization, allowing attackers to inject malicious SQL code. The CVSS 3.1 base score is 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), reflecting that it is remotely exploitable over the network without privileges or user interaction and can lead to complete compromise of the database's confidentiality, integrity, and availability. No patch or vendor advisory is currently available, and the affected versions are not explicitly specified beyond v1.0.

Detailed information about CVE-2026-36232: n/a. Get real-time updates, technical details, and mitigation strategies.


CVE-2026-36235: n/aCVE-2026-36235 0 A SQL injection vulnerability was found in the scheduleSubList.php file of itsourcecode Online Student Enrollment System v1.0. The reason for this issue is that the 'subjcode' parameter is directly embedded into the SQL query via string interpolation without any sanitization or validation. CriticalVulnerability#cve #cve-2026-36235 Join the discussion	CVE Database V5	04/10/2026, 00:00:00 UTC Added: 04/11/2026, 05:17:48 UTC
CVE-2026-36234: n/aCVE-2026-36234 0 itsourcecode Online Student Enrollment System v1.0 is vulnerable to SQL Injection in newCourse.php via the 'coursename' parameter. CriticalVulnerability#cve #cve-2026-36234 Join the discussion	CVE Database V5	04/10/2026, 00:00:00 UTC Added: 04/11/2026, 05:17:48 UTC
CVE-2026-36232: n/aCVE-2026-36232 0 A SQL injection vulnerability was found in the instructorClasses.php file of itsourcecode Online Student Enrollment System v1.0. The reason for this issue is that the 'classId' parameter from $_GET['classId'] is directly concatenated into the SQL query without any sanitization or validation. CriticalVulnerability#cve #cve-2026-36232 Join the discussion	CVE Database V5	04/10/2026, 00:00:00 UTC Added: 04/10/2026, 15:05:48 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional