Threat Intelligence Database
Comprehensive database of the latest cyber threats affecting organizations worldwide. Filter and search to find specific threat intelligence relevant to your organization.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threat Intelligence
Click on any threat for detailed analysis and mitigation recommendations
0 CVE-2025-67259 is a Broken Access Control vulnerability in ClassroomIO v0.1.13 that allows an authenticated low-privileged student user to access unauthorized course-level information. By modifying intercepted API requests from POST to GET against the /rest/v1/course PostgREST endpoint, the attacker can retrieve sensitive data including other students' details, tutor and admin profiles, and internal course metadata. The vulnerability has a CVSS score of 6.5, indicating medium severity. No official patch or remediation guidance is currently available from the vendor. There are no known exploits in the wild at this time. Join the discussion | CVE Database V5 | 04/24/2026, 00:00:00 UTC Added: 04/24/2026, 16:37:17 UTC |
0 An issue in ClasroomIO before v.0.2.6 allows a remote attacker to escalate privileges via the endpoints /api/verify and /rest/v1/profile Join the discussion | CVE Database V5 | 03/11/2026, 00:00:00 UTC Added: 03/11/2026, 15:14:51 UTC |
0 An Insecure Direct Object Reference (IDOR) in classroomio 0.1.13 allows students to access sensitive admin/teacher endpoints by manipulating course IDs in URLs, resulting in unauthorized disclosure of sensitive course, admin, and student data. The leak occurs momentarily before the system reverts to a normal state restricting access. Join the discussion | CVE Database V5 | 11/26/2025, 00:00:00 UTC Added: 11/26/2025, 20:02:38 UTC |
0 An issue was discovered in classroomio 0.1.13. Student accounts are able to delete courses from the Explore page without any authorization or authentication checks, bypassing the expected admin-only deletion restriction. Join the discussion | CVE Database V5 | 11/26/2025, 00:00:00 UTC Added: 11/26/2025, 19:09:17 UTC |
0 Stored Cross site scripting (XSS) vulnerability in Classroomio LMS 0.1.13 allows authenticated attackers to execute arbitrary code via crafted SVG cover images. Join the discussion | CVE Database V5 | 11/26/2025, 00:00:00 UTC Added: 11/26/2025, 18:58:12 UTC |
0 Stored Cross site scripting (XSS) vulnerability in Classroomio LMS 0.1.13 allows authenticated attackers to execute arbitrary code via crafted SVG profile pictures. Join the discussion | CVE Database V5 | 11/26/2025, 00:00:00 UTC Added: 11/26/2025, 18:43:12 UTC |
0 Insecure Direct Object Reference (IDOR) in classroomio 0.1.13 allows unauthorized share and invite access to course settings. Join the discussion | CVE Database V5 | 11/26/2025, 00:00:00 UTC Added: 11/26/2025, 18:43:12 UTC |
Showing 1 to 7 of 7 results