Threat Intelligence Database
Comprehensive database of the latest cyber threats affecting organizations worldwide. Filter and search to find specific threat intelligence relevant to your organization.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threat Intelligence
Click on any threat for detailed analysis and mitigation recommendations
Kanboard versions 1.2.52 and earlier contain a server-side request forgery (SSRF) vulnerability that allows authenticated users to bypass SSRF protections by using hexadecimal IP address notation in URLs. The vulnerability arises because the isPrivateURL() filter incorrectly treats hexadecimal-encoded IP addresses as safe, allowing cURL to connect to internal network resources such as cloud metadata services and localhost. This can lead to unauthorized internal network access via crafted URLs submitted through the web link creation feature. Join the discussion | GCVE Database | 07/30/2026, 18:31:39 UTC Added: 07/30/2026, 23:28:26 UTC |
Kanboard versions through 1.2.52 contain a vulnerability in the BoardAjaxController save() method where the task_id parameter is not verified to belong to the project identified by project_id. This allows any authenticated user who is a member of at least one project to enumerate and move tasks from other projects, including private ones they are not authorized to access. The issue arises because task identifiers are sequential and shared across the entire instance. The vulnerability was fixed in a commit identified as 564cc30. Join the discussion | GCVE Database | 07/15/2026, 18:31:58 UTC Added: 07/16/2026, 10:36:53 UTC |
Kanboard versions through 1.2.52 contain a vulnerability in UserViewController::removeSession where the session id parameter is not validated before being passed to RememberMeSessionModel::remove. This allows authenticated users to delete other users' persistent login sessions by enumerating session IDs, potentially causing denial of service by forcing re-authentication. Join the discussion | GCVE Database | 06/25/2026, 21:31:30 UTC Added: 06/26/2026, 22:06:33 UTC |
0 Kanboard 1.2.34 is vulnerable to Html Injection in the group management feature. Join the discussion | CVE Database V5 | 01/24/2024, 00:00:00 UTC Added: 06/05/2025, 17:14:17 UTC |
Showing 1 to 4 of 4 results