Threat Intelligence Database
Comprehensive database of the latest cyber threats affecting organizations worldwide. Filter and search to find specific threat intelligence relevant to your organization.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threat Intelligence
Click on any threat for detailed analysis and mitigation recommendations
Papermerge Core through 3.5.3 contains a missing authorization vulnerability that allows authenticated users to list other groups' tags and document types by supplying a group_id parameter. Attackers who know a group's UUID can query GET /tags/all or GET /document-types/all, which skip the user_belongs_to check, to disclose metadata of groups they do not belong to. Join the discussion | CVE Database V5 | 10/14/2026, 14:17:00 UTC Added: 10/14/2026, 14:34:24 UTC |
Papermerge Core versions up to and including 3.5.3 have a missing authorization vulnerability in the shared nodes API. Authenticated users can exploit this flaw by supplying arbitrary node UUIDs to share other users' documents. This allows attackers to grant themselves any role on these documents, enabling them to read, modify, delete, or revoke shares on victims' documents. Join the discussion | CVE Database V5 | 10/14/2026, 14:16:59 UTC Added: 10/14/2026, 14:34:21 UTC |
Papermerge Core through 3.5.3 contains a missing authorization vulnerability that allows authenticated users to manipulate other users' pages because page management and OCR endpoints skip has_node_perm checks. Attackers knowing page UUIDs can call /pages/, /pages/move, or /pages/extract to rotate, delete, or extract victims' pages, and trigger OCR via /tasks/ocr. Join the discussion | CVE Database V5 | 10/14/2026, 14:16:59 UTC Added: 10/14/2026, 14:34:21 UTC |
Showing 1 to 3 of 3 results