Threat Intelligence Database
Comprehensive database of the latest cyber threats affecting organizations worldwide. Filter and search to find specific threat intelligence relevant to your organization.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threat Intelligence
Click on any threat for detailed analysis and mitigation recommendations
0 PgBouncer before 1.25.2 did not perform an appropriate authorization check for the KILL_CLIENT admin command. All users with access to the administration console (which itself requires authorization) could run this command. It would have been correct to allow only users listed in the admin_users parameter. Join the discussion | CVE Database V5 | 05/12/2026, 08:52:54 UTC Added: 05/09/2026, 01:22:36 UTC |
0 A possible null pointer reference in PgBouncer before 1.25.2 could lead to a crash, if a server sends an error response without SQLSTATE field. Join the discussion | CVE Database V5 | 05/12/2026, 08:52:53 UTC Added: 05/09/2026, 01:22:36 UTC |
0 The SCRAM code in PgBouncer before 1.25.2 did not check the return value of strlcat() correctly when building the contents of the SCRAM client-final-message. A malicious backend that sends a SCRAM server-final-message with a long nonce can trigger a stack overflow. Join the discussion | CVE Database V5 | 05/12/2026, 08:52:51 UTC Added: 05/09/2026, 01:22:36 UTC |
An integer overflow in network packet parsing code in PgBouncer before 1.25.2 bypasses a boundary check and can lead to a crash. An unauthenticated remote attacker can crash PgBouncer with a malformed SCRAM authentication packet. Join the discussion | CVE Database V5 | 05/12/2026, 08:52:50 UTC Added: 05/09/2026, 01:22:36 UTC |
Password can be used past expiry in PgBouncer due to auth_query not taking into account Postgres its VALID UNTIL value, which allows an attacker to log in with an already expired password Join the discussion | CVE Database V5 | 04/18/2025, 19:19:16 UTC Added: 11/03/2025, 19:46:24 UTC |
Showing 1 to 5 of 5 results