Threat Intelligence Database
Comprehensive database of the latest cyber threats affecting organizations worldwide. Filter and search to find specific threat intelligence relevant to your organization.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threat Intelligence
Click on any threat for detailed analysis and mitigation recommendations
The equipment initially can be configured using the manufacturer's application, by Wi-Fi, by the web server or with the manufacturer’s software. Using the manufacturer's software, the device can be configured via UDP. Analyzing this communication, it has been observed that any aspect of the initial configuration can be changed by means of the device's MAC without the need for authentication. Join the discussion | CVE Database V5 | 10/31/2025, 14:23:06 UTC Added: 10/31/2025, 14:37:32 UTC |
0 The web server of the device performs exchanges of sensitive information in clear text through an insecure protocol. Join the discussion | CVE Database V5 | 10/31/2025, 14:19:48 UTC Added: 10/31/2025, 14:37:32 UTC |
Denial of service of the web server through specific requests to this protocol Join the discussion | CVE Database V5 | 10/31/2025, 14:17:00 UTC Added: 10/31/2025, 14:29:07 UTC |
0 The web application is vulnerable to a so-called ‘clickjacking’ attack. In this type of attack, the vulnerable page is inserted into a page controlled by the attacker in order to deceive the victim. This deception can range from making the victim click on a button to making them enter their login credentials in a form that, a priori, appears legitimate. Join the discussion | CVE Database V5 | 10/31/2025, 14:12:55 UTC Added: 10/31/2025, 14:29:07 UTC |
The equipment grants a JWT token for each connection in the timeline, but during an active valid session, a hijacking of the token can be done. This will allow an attacker with the token modify parameters of security, access or even steal the session without the legitimate and active session detecting it. The web server allows the attacker to reuse an old session JWT token while the legitimate session is active. Join the discussion | CVE Database V5 | 10/31/2025, 13:42:32 UTC Added: 10/31/2025, 13:52:48 UTC |
Showing 1 to 5 of 5 results