Threat Intelligence Database
Comprehensive database of the latest cyber threats affecting organizations worldwide. Filter and search to find specific threat intelligence relevant to your organization.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threat Intelligence
Click on any threat for detailed analysis and mitigation recommendations
0 A security vulnerability has been detected in Sanluan PublicCMS up to 6.202506.d. This affects the function AbstractFreemarkerView.doRender of the file publiccms-parent/publiccms-core/src/main/java/com/publiccms/common/base/AbstractFreemarkerView.java of the component FreeMarker Template Handler. Such manipulation leads to improper neutralization of special elements used in a template engine. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet. Join the discussion | CVE Database V5 | 04/09/2026, 22:45:14 UTC Added: 04/09/2026, 23:05:47 UTC |
A vulnerability has been found in Sanluan PublicCMS up to 4.0.202506.d/5.202506.d/6.202506.d. Impacted is the function Paid of the file publiccms-parent/publiccms-trade/src/main/java/com/publiccms/logic/service/trade/TradePaymentService.java of the component Trade Payment Handler. The manipulation of the argument paymentId leads to improper authorization. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitability is considered difficult. The exploit has been disclosed to the public and may be used. The identifier of the patch is 7329437e1288540336b1c66c114ed3363adcba02. It is recommended to apply a patch to fix this issue. Join the discussion | CVE Database V5 | 02/06/2026, 08:02:09 UTC Added: 02/06/2026, 08:15:09 UTC |
0 PublicCMS V5.202506.b is vulnerable to Cross Site Scripting (XSS) in the Content Search module. Join the discussion | CVE Database V5 | 12/22/2025, 00:00:00 UTC Added: 12/22/2025, 20:00:27 UTC |
0 PublicCMS V5.202506.b is vulnerable to Cross Site Request Forgery (CSRF) in the CkEditorAdminController. Join the discussion | CVE Database V5 | 12/01/2025, 00:00:00 UTC Added: 12/01/2025, 20:57:43 UTC |
0 PublicCMS V5.202506.b is vulnerable to path traversal via the doUploadSitefile method. Join the discussion | CVE Database V5 | 12/01/2025, 00:00:00 UTC Added: 12/01/2025, 20:12:46 UTC |
0 A vulnerability, which was classified as problematic, has been found in Sanluan PublicCMS up to 5.202506.a. This issue affects some unknown processing of the file publiccms-parent/publiccms/src/main/webapp/resource/plugins/pdfjs/viewer.html. The manipulation of the argument File leads to open redirect. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The patch is named f1af17af004ca9345c6fe4d5936d87d008d26e75. It is recommended to apply a patch to fix this issue. Join the discussion | CVE Database V5 | 07/22/2025, 03:32:05 UTC Added: 07/22/2025, 03:46:05 UTC |
0 A vulnerability was found in Sanluan PublicCMS up to 5.202506.a. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file publiccms-parent/publiccms/src/main/resources/templates/admin/cmsDiy/preview.html. The manipulation of the argument url leads to open redirect. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The patch is named c1e79f124e3f4c458315d908ed7dee06f9f12a76/f1af17af004ca9345c6fe4d5936d87d008d26e75. It is recommended to apply a patch to fix this issue. Join the discussion | CVE Database V5 | 07/22/2025, 01:32:06 UTC Added: 07/22/2025, 02:01:05 UTC |
0 PublicCMS V4.0.202406.d was discovered to contain a cross-site scripting (XSS) vulnerability via a crafted script to the Category Managment feature Join the discussion | CVE Database V5 | 10/08/2024, 00:00:00 UTC Added: 02/25/2026, 21:43:26 UTC |
0 An arbitrary file upload vulnerability in the component /admin/cmsTemplate/doUpload of PublicCMS v4.0.202302.e allows attackers to execute arbitrary code via uploading a crafted file. Join the discussion | CVE Database V5 | 07/12/2024, 00:00:00 UTC Added: 02/25/2026, 21:42:05 UTC |
0 An arbitrary file upload vulnerability in the component /admin/cmsTemplate/savePlaceMetaData of Public CMS v.4.0.202302.e allows attackers to execute arbitrary code via uploading a crafted file. Join the discussion | CVE Database V5 | 07/12/2024, 00:00:00 UTC Added: 02/25/2026, 21:42:05 UTC |
Showing 1 to 10 of 15 results