Threat Intelligence Database
Comprehensive database of the latest cyber threats affecting organizations worldwide. Filter and search to find specific threat intelligence relevant to your organization.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threat Intelligence
Click on any threat for detailed analysis and mitigation recommendations
CVE-2026-100741 is a critical eval injection vulnerability in Progressive Robot Ltd's hMailServer versions 6.0.0 through 6.3.3 on Windows. It allows a remote unauthenticated attacker to execute arbitrary JScript code with service account privileges via crafted passwords or certain event script handlers. Exploitation requires non-default configurations including enabled event scripting, JScript as the script language, and specific event handlers defined. The vulnerability does not affect VBScript event scripts or Linux builds. It has a CVSS score of 9.8, indicating high impact on confidentiality, integrity, and availability. Join the discussion | CVE Database V5 | 09/27/2026, 07:12:54 UTC Added: 09/27/2026, 07:33:27 UTC |
0 Use of hardcoded cryptographic key in Encryption.cs in hMailServer 5.8.6 and 5.6.9-beta allows attacker to decrypt passwords to other servers from hMailAdmin.exe.config file to access other hMailServer admin consoles with configured connections. Join the discussion | CVE Database V5 | 07/21/2025, 00:00:00 UTC Added: 07/21/2025, 16:16:06 UTC |
0 Use of hardcoded cryptographic key in BlowFish.cpp in hMailServer 5.8.6 and 5.6.9-beta allows attacker to decrypt passwords used in database connections from hMailServer.ini config file. Join the discussion | CVE Database V5 | 07/21/2025, 00:00:00 UTC Added: 07/21/2025, 16:16:06 UTC |
0 An issue in hMailServer v.5.8.6 allows a local attacker to obtain sensitive information via the hmailserver/installation/hMailServerInnoExtension.iss and hMailServer.ini components. Join the discussion | CVE Database V5 | 07/21/2025, 00:00:00 UTC Added: 07/21/2025, 16:16:06 UTC |
Showing 1 to 4 of 4 results