Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

AlienVault OTX General

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Microsoft Security Blog

Google Project Zero

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

projectworldcve

A security vulnerability has been detected in projectworlds Online Art Gallery Shop 1.0. This affects an unknown part of the file /admin/adminHome.php. Such manipulation of the argument reach_nm leads to sql injection. The attack can be executed remotely. The exploit has been disclosed publicly and may be used.

CVE-2026-3759 identifies a SQL injection vulnerability in projectworlds Online Art Gallery Shop version 1.0, specifically within the /admin/adminHome.php file. The vulnerability arises from improper sanitization of the 'reach_nm' parameter, which an attacker can manipulate to inject arbitrary SQL queries. This injection flaw allows remote attackers to execute unauthorized SQL commands without requiring authentication or user interaction, making it a network-exploitable vulnerability. The CVSS 4.0 base score is 6.9, reflecting medium severity due to the potential for partial impact on confidentiality, integrity, and availability, but with limited scope and no privilege or user interaction requirements. The vulnerability could enable attackers to extract sensitive data, modify database contents, or disrupt application functionality. Although no known exploits are currently active in the wild, the public disclosure of the exploit code increases the risk of future attacks. The absence of vendor patches or mitigations in the provided information suggests that affected organizations must implement immediate defensive measures. This vulnerability highlights the critical need for secure coding practices, especially in web applications handling administrative functions and sensitive data.

Detailed information about CVE-2026-3759: SQL Injection in projectworlds Online Art Gallery Shop affecting projectworlds Online Art Gallery Shop. Get real-time 

CVE-2026-3759: SQL Injection in projectworlds Online Art Gallery Shop - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-3759: SQL Injection in projectworlds Online Art Gallery Shop

A security flaw has been discovered in projectworlds Online Art Gallery Shop 1.0. Affected by this vulnerability is an unknown functionality of the file /?pass=1. The manipulation of the argument fnm results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks.

CVE-2026-3757 is a remote SQL injection vulnerability affecting projectworlds Online Art Gallery Shop version 1.0. The vulnerability is triggered by manipulating the 'fnm' parameter in a request to the /?pass=1 endpoint. This injection flaw allows an attacker to craft malicious SQL queries that the backend database executes, potentially leading to unauthorized data access, data modification, or deletion. The vulnerability requires no authentication and no user interaction, making it highly accessible to remote attackers. The CVSS 4.0 vector indicates network attack vector (AV:N), low attack complexity (AC:L), no privileges required (PR:N), no user interaction (UI:N), and partial impacts on confidentiality, integrity, and availability (VC:L, VI:L, VA:L). Despite the medium severity score of 6.9, the public release of exploit code increases the urgency for remediation. The affected product is niche software used for online art gallery shops, which may have limited but specific deployment in small to medium e-commerce businesses. No official patches or fixes have been published yet, and no known active exploitation has been reported, but the vulnerability is considered exploitable and dangerous due to its nature and accessibility.

Detailed information about CVE-2026-3757: SQL Injection in projectworlds Online Art Gallery Shop affecting projectworlds Online Art Gallery Shop. Get real-time 

CVE-2026-3757: SQL Injection in projectworlds Online Art Gallery Shop - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-3757: SQL Injection in projectworlds Online Art Gallery Shop


CVE-2026-3759: SQL Injection in projectworlds Online Art Gallery ShopCVE-2026-3759 0 A security vulnerability has been detected in projectworlds Online Art Gallery Shop 1.0. This affects an unknown part of the file /admin/adminHome.php. Such manipulation of the argument reach_nm leads to sql injection. The attack can be executed remotely. The exploit has been disclosed publicly and may be used. MediumVulnerabilityUnited StatesIndiaGermany+7#cve #cve-2026-3759 Join the discussion	CVE Database V5	03/08/2026, 18:02:11 UTC Added: 03/08/2026, 18:22:46 UTC
CVE-2026-3757: SQL Injection in projectworlds Online Art Gallery ShopCVE-2026-3757 0 A security flaw has been discovered in projectworlds Online Art Gallery Shop 1.0. Affected by this vulnerability is an unknown functionality of the file /?pass=1. The manipulation of the argument fnm results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks. MediumVulnerabilityUnited StatesGermanyUnited Kingdom+7#cve #cve-2026-3757 Join the discussion	CVE Database V5	03/08/2026, 18:02:07 UTC Added: 03/08/2026, 18:22:46 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional