Threat Intelligence Database
Comprehensive database of the latest cyber threats affecting organizations worldwide. Filter and search to find specific threat intelligence relevant to your organization.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threat Intelligence
Click on any threat for detailed analysis and mitigation recommendations
0 SQL Injection vulnerability in function setwxqyAction in file webmain/task/api/loginAction.php in Xinhu Rainrock RockOA 2.7.0 allowing attackers gain sensitive information, including administrator accounts, password hashes, database structure, and other critical data via the shouji and userid parameters. Join the discussion | CVE Database V5 | 12/09/2025, 00:00:00 UTC Added: 12/09/2025, 17:05:20 UTC |
0 SQL Injection vulnerability in function getselectdataAjax in file inputAction.php in Xinhu Rainrock RockOA 2.7.0 allowing attackers gain sensitive information, including administrator accounts, password hashes, database structure, and other critical data via the actstr parameter. Join the discussion | CVE Database V5 | 12/09/2025, 00:00:00 UTC Added: 12/09/2025, 17:05:20 UTC |
0 An issue was discovered in file index.php in Xinhu Rainrock RockOA 2.7.0 allowing attackers to gain sensitive information via phpinfo via the a parameter to the index.php. Join the discussion | CVE Database V5 | 12/09/2025, 00:00:00 UTC Added: 12/09/2025, 17:05:20 UTC |
0 Cross-site scripting (XSS) vulnerability in function urltestAction in file cliAction.php in Xinhu Rainrock RockOA 2.7.0 allows remote attackers to inject arbitrary web script or HTML via the m parameter to the task.php endpoint. Join the discussion | CVE Database V5 | 12/09/2025, 00:00:00 UTC Added: 12/09/2025, 17:05:20 UTC |
0 Xinhu RockOA v2.6.3 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the /kaoqin/tpl_kaoqin_locationchange.html component. Join the discussion | CVE Database V5 | 06/17/2024, 00:00:00 UTC Added: 02/25/2026, 21:40:58 UTC |
0 Xinhu RockOA v2.6.3 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the num parameter at /flow/flow.php. Join the discussion | CVE Database V5 | 06/17/2024, 00:00:00 UTC Added: 02/25/2026, 21:40:58 UTC |
Showing 1 to 6 of 6 results