Threat Intelligence Database
Comprehensive database of the latest cyber threats affecting organizations worldwide. Filter and search to find specific threat intelligence relevant to your organization.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threat Intelligence
Click on any threat for detailed analysis and mitigation recommendations
0 CVE-2026-5624 is a cross-site request forgery (CSRF) vulnerability affecting ProjectSend version r2002, specifically in the file upload.php. This flaw allows an attacker to remotely initiate unauthorized actions by exploiting the CSRF weakness. The vulnerability has a medium severity with a CVSS 4.0 base score of 5.3. A patch is available in version r2029, identified by commit 2c0d25824ab571b6c219ac1a188ad9350149661b, which resolves the issue. Users of the affected version are advised to upgrade to the fixed release to mitigate the risk. Join the discussion | CVE Database V5 | 04/06/2026, 05:00:19 UTC Added: 04/06/2026, 06:00:36 UTC |
0 A vulnerability was detected in projectsend up to r1945. This affects the function realpath of the file /import-orphans.php of the component Delete Handler. Performing a manipulation of the argument files[] results in path traversal. Remote exploitation of the attack is possible. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Join the discussion | CVE Database V5 | 03/12/2026, 15:32:11 UTC Added: 03/12/2026, 15:44:48 UTC |
0 A security vulnerability has been detected in projectsend up to r1945. The affected element is an unknown function of the component AJAX Endpoints. The manipulation leads to missing authorization. The attack can be initiated remotely. The identifier of the patch is 35dfd6f08f7d517709c77ee73e57367141107e6b. To fix this issue, it is recommended to deploy a patch. Join the discussion | CVE Database V5 | 03/12/2026, 03:02:08 UTC Added: 03/12/2026, 03:44:50 UTC |
0 A flaw has been found in projectsend up to r1720. Impacted is an unknown function of the component File Editor/Custom Download Aliases. This manipulation causes cross site scripting. The attack is possible to be carried out remotely. The exploit has been published and may be used. Upgrading to version r1945 is recommended to address this issue. Patch name: 334da1ea39cb12f6b6e98dd2f80bb033e0c7b845. It is advisable to upgrade the affected component. Join the discussion | CVE Database V5 | 11/16/2025, 01:02:07 UTC Added: 11/16/2025, 01:16:01 UTC |
Showing 1 to 4 of 4 results