Threat Intelligence Database
Comprehensive database of the latest cyber threats affecting organizations worldwide. Filter and search to find specific threat intelligence relevant to your organization.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threat Intelligence
Click on any threat for detailed analysis and mitigation recommendations
0 The Grav Flex Objects plugin versions 1.4.0 through before 1.4.17 contains an authorization bypass vulnerability. This flaw allows authenticated non-super users with certain permissions to read, modify, or delete pages they should not have access to. The issue arises because the API routes check only directory-level admin.pages permissions and do not enforce more granular Pages API permissions or page-level rules. Join the discussion | CVE Database V5 | 10/22/2026, 01:43:44 UTC Added: 10/22/2026, 02:03:43 UTC |
Grav Flex Objects Plugin allows you to build custom collections of objects. Prior to 1.4.3, the Grav Flex Objects Admin Next API requireFlexPermission() method in classes/Api/FlexApiController.php returns without denying access when a directory blueprint omits config.admin.permissions. An authenticated account with only api.access can use the index, show, create, update, delete, export, and media handlers for a permission-less directory even though the core admin.flex-object. authorization fallback would deny the same actions. This issue is fixed in version 1.4.3. Join the discussion | CVE Database V5 | 08/19/2026, 15:26:27 UTC Added: 08/19/2026, 15:37:44 UTC |
Showing 1 to 2 of 2 results