Threat Intelligence Database
Comprehensive database of the latest cyber threats affecting organizations worldwide. Filter and search to find specific threat intelligence relevant to your organization.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threat Intelligence
Click on any threat for detailed analysis and mitigation recommendations
0 CVE-2026-80104 is a critical path traversal vulnerability in eosphoros-ai's DB-GPT version 0.8.0. The application improperly constructs the destination path for uploaded files without restricting them to the intended upload directory. This allows an unauthenticated remote attacker to write files outside the upload directory, including placing or replacing Python modules within the application package, leading to remote code execution. Join the discussion | CVE Database V5 | 08/25/2026, 20:18:35 UTC Added: 08/25/2026, 20:24:13 UTC |
0 A flaw has been found in eosphoros-ai db-gpt up to 0.7.5. This vulnerability affects unknown code of the file /api/v1/editor/ of the component Incomplete Fix. This manipulation causes sql injection. It is possible to initiate the attack remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Join the discussion | CVE Database V5 | 03/20/2026, 20:02:11 UTC Added: 03/20/2026, 20:09:24 UTC |
0 SQL Injection in editor_sql_run and query_ex in eosphoros-ai DB-GPT 0.7.0 allows remote attackers to execute arbitrary SQL statements via crafted input passed to the /v1/editor/sql/run or /v1/editor/chart/run endpoints, interacting with api_editor_v1.editor_sql_run, editor_chart_run, and datasource.rdbms.base.query_ex. Join the discussion | CVE Database V5 | 07/22/2025, 00:00:00 UTC Added: 07/22/2025, 19:31:08 UTC |
0 File Upload vulnerability in agent.hub.controller.refresh_plugins in eosphoros-ai DB-GPT 0.7.0 allows remote attackers to execute arbitrary code via a malicious plugin ZIP file uploaded to the /v1/personal/agent/upload endpoint, interacting with plugin_hub._sanitize_filename and plugins_util.scan_plugins. Join the discussion | CVE Database V5 | 07/22/2025, 00:00:00 UTC Added: 07/22/2025, 19:01:12 UTC |
0 A Denial of Service (DoS) vulnerability in the multipart request boundary processing mechanism of eosphoros-ai/db-gpt v0.6.0 allows unauthenticated attackers to cause excessive resource consumption. The server fails to handle excessive characters appended to the end of multipart boundaries, leading to an infinite loop and complete denial of service for all users. This vulnerability affects all endpoints processing multipart/form-data requests. Join the discussion | CVE Database V5 | 03/20/2025, 10:09:50 UTC Added: 10/15/2025, 13:01:22 UTC |
Showing 1 to 5 of 5 results