Threat Intelligence Database
Comprehensive database of the latest cyber threats affecting organizations worldwide. Filter and search to find specific threat intelligence relevant to your organization.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threat Intelligence
Click on any threat for detailed analysis and mitigation recommendations
0 An issue in FileThingie v.2.5.7 allows a remote attacker to obtain sensitive information via the ft2.php component. Join the discussion | GCVE Database | 07/20/2026, 00:00:00 UTC Added: 07/20/2026, 19:41:29 UTC |
0 File Thingie 2.5.7 is vulnerable to Directory Traversal. A malicious user can leverage the "create folder from url" functionality of the application to read arbitrary files on the target system. Join the discussion | CVE Database V5 | 03/20/2026, 00:00:00 UTC Added: 03/20/2026, 21:35:13 UTC |
0 File Thingie 2.5.7 is vulnerable to Cross Site Scripting (XSS). A malicious user can leverage the "upload file" functionality to upload a file with a crafted file name used to trigger a Javascript payload. Join the discussion | CVE Database V5 | 03/20/2026, 00:00:00 UTC Added: 03/20/2026, 17:24:21 UTC |
0 File Thinghie 2.5.7 is vulnerable to Cross Site Scripting (XSS). A malicious user can leverage the "dir" parameter of the GET request to invoke arbitrary javascript code. Join the discussion | CVE Database V5 | 03/20/2026, 00:00:00 UTC Added: 03/20/2026, 17:24:21 UTC |
0 CVE-2023-53942 is a critical authenticated file upload vulnerability in File Thingie version 2.5.7 that allows attackers with limited privileges to upload malicious PHP zip archives. By uploading and extracting a crafted PHP payload, attackers can execute arbitrary system commands on the affected web server without user interaction. This vulnerability has a CVSS 4.0 score of 9.4, indicating a critical severity level due to its high impact on confidentiality, integrity, and availability. Although no known exploits are currently reported in the wild, the ease of exploitation and potential for full system compromise make this a significant threat. European organizations using File Thingie 2.5. Join the discussion | CVE Database V5 | 12/18/2025, 19:53:35 UTC Added: 12/18/2025, 20:11:30 UTC |
Showing 1 to 5 of 5 results