Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit NetSec

Reddit Cybersecurity

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

AWS Security Bulletins

GCP Kubernetes Security

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

grocy

Bernd Bestel grocy version 4.6.0 contains a critical SQL injection vulnerability in the product-group parameter at the /stockreports/spendings endpoint. This flaw allows unauthenticated attackers to execute crafted SQL statements, potentially accessing sensitive database information. The vulnerability has a CVSS score of 9.8, indicating high impact on confidentiality, integrity, and availability. No official patch or remediation guidance is currently provided by the vendor. There are no known exploits in the wild at this time.

CVE-2026-50890 identifies a SQL injection vulnerability in grocy v4.6.0 specifically in the product-group parameter of the /stockreports/spendings endpoint. This vulnerability (CWE-89) enables remote attackers without privileges to inject malicious SQL queries, leading to unauthorized access to sensitive database data. The CVSS 3.1 base score of 9.8 reflects network attack vector, low attack complexity, no privileges required, no user interaction, and high impact on confidentiality, integrity, and availability. No patch or official remediation level has been published as of the data provided.

Detailed information about CVE-2026-50890: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2026-50890: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-50890: n/a

Grocy through 4.3.0 has no CSRF protection, as demonstrated by changing the Administrator's password.

CVE-2024-55076 is a Cross-Site Request Forgery (CSRF) vulnerability identified in the Grocy project, an open-source web-based inventory and household management system. The vulnerability affects all versions through 4.3.0 due to the absence of CSRF protection mechanisms. CSRF attacks exploit the trust a web application places in a user's browser by tricking the user into submitting unauthorized requests. In this case, an attacker can craft a malicious request that, when executed by an authenticated user’s browser, changes the Administrator's password without their knowledge or consent. The vulnerability is critical because it requires no authentication or user interaction, and the attacker can execute it remotely over the network. The CVSS 3.1 vector (AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) indicates network attack vector, high attack complexity, no privileges or user interaction required, unchanged scope, and high impact on confidentiality, integrity, and availability. The lack of CSRF tokens or similar protections in Grocy’s web interface allows this attack vector. Although no exploits are currently known in the wild, the potential for unauthorized administrative control is significant. This vulnerability could allow attackers to lock out legitimate administrators, manipulate inventory data, or disrupt operations dependent on Grocy. The absence of patch links suggests that a fix may not yet be available, emphasizing the need for immediate mitigation steps.

Detailed information about CVE-2024-55076: CWE-352 Cross-Site Request Forgery (CSRF) in Grocy project Grocy affecting Grocy project Grocy. Get real-time updates

CVE-2024-55076: CWE-352 Cross-Site Request Forgery (CSRF) in Grocy project Grocy - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-55076: CWE-352 Cross-Site Request Forgery (CSRF) in Grocy project Grocy


CVE-2026-50890: n/aCVE-2026-50890 0 Bernd Bestel grocy version 4.6.0 contains a critical SQL injection vulnerability in the product-group parameter at the /stockreports/spendings endpoint. This flaw allows unauthenticated attackers to execute crafted SQL statements, potentially accessing sensitive database information. The vulnerability has a CVSS score of 9.8, indicating high impact on confidentiality, integrity, and availability. No official patch or remediation guidance is currently provided by the vendor. There are no known exploits in the wild at this time. CriticalVulnerability#cve #cve-2026-50890 Join the discussion	CVE Database V5	06/15/2026, 00:00:00 UTC Added: 06/15/2026, 19:31:04 UTC
CVE-2024-55076: CWE-352 Cross-Site Request Forgery (CSRF) in Grocy project GrocyCVE-2024-55076 0 Grocy through 4.3.0 has no CSRF protection, as demonstrated by changing the Administrator's password. HighVulnerabilityUnited StatesGermanyNetherlands+7#cve #cve-2024-55076 #cwe-352 Join the discussion	CVE Database V5	01/06/2025, 00:00:00 UTC Added: 02/25/2026, 21:38:20 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional