Threat Intelligence Database
Comprehensive database of the latest cyber threats affecting organizations worldwide. Filter and search to find specific threat intelligence relevant to your organization.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threat Intelligence
Click on any threat for detailed analysis and mitigation recommendations
CVE-2026-6497 is a server-side request forgery (SSRF) vulnerability in prasathmani TinyFileManager versions up to 2.6. The vulnerability exists in the file /filemanager.php? p= with the ajax=true&type=upload parameters, specifically in the File Upload Handler component. Manipulating the uploadurl argument allows an attacker to initiate SSRF remotely. The vulnerability has been publicly disclosed, but the vendor has not responded or provided a patch. The CVSS 4.0 base score is 5.3, indicating a medium severity level. Join the discussion | CVE Database V5 | 04/17/2026, 15:30:12 UTC Added: 04/17/2026, 15:38:11 UTC |
CVE-2026-6496 is a path traversal vulnerability in prasathmani TinyFileManager versions up to 2.6. The issue exists in the POST parameter handler of the /filemanager.php file, where manipulation of the 'file[]' argument allows an attacker to perform path traversal remotely. The vulnerability has a medium severity with a CVSS score of 5.3. The vendor has not responded to disclosure attempts and no official patch or remediation is currently available. Exploit details have been made public, but no known exploits in the wild have been reported. Join the discussion | CVE Database V5 | 04/17/2026, 14:30:12 UTC Added: 04/17/2026, 14:53:16 UTC |
A flaw has been found in prasathmani TinyFileManager up to 2.6. Affected by this issue is some unknown functionality of the file tinyfilemanager.php. This manipulation of the argument fullpath causes path traversal. Remote exploitation of the attack is possible. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Join the discussion | CVE Database V5 | 12/28/2025, 13:32:08 UTC Added: 12/30/2025, 22:22:48 UTC |
Showing 1 to 3 of 3 results