Threat Intelligence Database
Comprehensive database of the latest cyber threats affecting organizations worldwide. Filter and search to find specific threat intelligence relevant to your organization.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threat Intelligence
Click on any threat for detailed analysis and mitigation recommendations
LogicalDOC Community Edition through version 9.3 has an improper authorization vulnerability in its PswRecovery servlet. This flaw allows attackers to reuse password recovery tickets obtained for their own accounts with any user ID, including administrators. Exploitation can lead to unauthorized password resets, account lockouts, and disclosure of users' email addresses. Join the discussion | GCVE Database | 10/12/2026, 15:32:18 UTC Added: 10/12/2026, 21:47:17 UTC |
LogicalDOC Community Edition versions through 9.3 have a username enumeration vulnerability. This flaw allows unauthenticated attackers to identify valid usernames by exploiting the AvatarServlet endpoint, which lacks session validation. Attackers can supply usernames or numeric IDs to the userId parameter and compare transparent images to real avatars, enabling user enumeration and profile picture retrieval. The vulnerability has a CVSS score of 5.3, indicating medium severity. Join the discussion | GCVE Database | 10/12/2026, 15:32:18 UTC Added: 10/12/2026, 21:47:17 UTC |
LogicalDOC Community Edition versions through 9.3 have an unauthenticated file upload vulnerability in the UploadServlet. This flaw allows remote attackers to upload files without a valid session, potentially exhausting server disk space by repeatedly sending multipart requests with unlimited file parts to the /upload endpoint. The vulnerability does not impact confidentiality or integrity but can cause denial of service by disk exhaustion. Join the discussion | GCVE Database | 10/12/2026, 15:32:17 UTC Added: 10/12/2026, 21:47:19 UTC |
Showing 1 to 3 of 3 results