Threat Intelligence Database
Comprehensive database of the latest cyber threats affecting organizations worldwide. Filter and search to find specific threat intelligence relevant to your organization.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threat Intelligence
Click on any threat for detailed analysis and mitigation recommendations
A stored cross-site scripting (XSS) vulnerability exists in cube-root/directory-serve through version 1.3.7. This flaw allows an attacker to inject arbitrary JavaScript into the web interface by uploading a file with a specially crafted filename containing HTML attribute-breaking characters. The vulnerability has a CVSS 3.1 base score of 5.4, indicating medium severity. No official patch or remediation information is currently provided. Join the discussion | GCVE Database | 08/10/2026, 12:31:52 UTC Added: 08/10/2026, 15:39:57 UTC |
A path traversal vulnerability exists in cube-root/directory-serve versions through 1.3.7 that allows an unauthenticated remote attacker to delete arbitrary files outside the intended served directory when the application is run with the --delete option. This vulnerability can lead to high impact on integrity and availability without requiring authentication or user interaction. Join the discussion | GCVE Database | 08/10/2026, 12:31:52 UTC Added: 08/10/2026, 15:39:57 UTC |
CVE-2026-72570 is a stored cross-site scripting (XSS) vulnerability in the cube-root directory-serve product up to version 1.3.7. It allows an attacker to inject arbitrary JavaScript into the web interface by uploading a file with a crafted filename containing HTML attribute-breaking characters. This vulnerability can lead to partial compromise of confidentiality and integrity but does not affect availability. The vulnerability has a medium severity rating with a CVSS score of 5.4. No official patch or remediation guidance is currently available from the vendor. Join the discussion | CVE Database V5 | 08/10/2026, 10:40:46 UTC Added: 08/10/2026, 10:56:46 UTC |
Showing 1 to 3 of 3 results