Threat Intelligence Database
Comprehensive database of the latest cyber threats affecting organizations worldwide. Filter and search to find specific threat intelligence relevant to your organization.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threat Intelligence
Click on any threat for detailed analysis and mitigation recommendations
A stored cross-site scripting (XSS) vulnerability in cube-root/directory-serve through 1.3.7 allows an attacker to inject arbitrary JavaScript into… (CVE-2026-72570)CVE-2026-72570 0 A stored cross-site scripting (XSS) vulnerability exists in cube-root/directory-serve through version 1.3.7. This flaw allows an attacker to inject arbitrary JavaScript into the web interface by uploading a file with a specially crafted filename containing HTML attribute-breaking characters. The vulnerability has a CVSS 3.1 base score of 5.4, indicating medium severity. No official patch or remediation information is currently provided. Join the discussion | GCVE Database | 08/10/2026, 12:31:52 UTC Added: 08/10/2026, 15:39:57 UTC |
A path traversal vulnerability in cube-root/directory-serve through 1.3.7 allows an unauthenticated remote attacker to delete arbitrary files… (CVE-2026-72569)CVE-2026-72569 0 A path traversal vulnerability exists in cube-root/directory-serve versions through 1.3.7 that allows an unauthenticated remote attacker to delete arbitrary files outside the intended served directory when the application is run with the --delete option. This vulnerability can lead to high impact on integrity and availability without requiring authentication or user interaction. Join the discussion | GCVE Database | 08/10/2026, 12:31:52 UTC Added: 08/10/2026, 15:39:57 UTC |
CVE-2026-72570: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in cube-root directory-serveCVE-2026-72570 0 A stored cross-site scripting (XSS) vulnerability in cube-root/directory-serve through 1.3.7 allows an attacker to inject arbitrary JavaScript into the web interface by uploading a file with a crafted filename containing HTML attribute-breaking characters. Join the discussion | CVE Database V5 | 08/10/2026, 10:40:46 UTC Added: 08/10/2026, 10:56:46 UTC |
Showing 1 to 3 of 3 results