Skip to main content

Threat Intelligence Database

Comprehensive database of the latest cyber threats affecting organizations worldwide. Filter and search to find specific threat intelligence relevant to your organization.

Pro Console Lifetime

Stop chasing alerts. Route them.

Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.

Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)

View Plans & Pricing

API access activates after upgrading in Console -> Billing.

Breach by OffSeqOFFSEQFRIENDS — 25% OFF

Check if your credentials are on the dark web

Instant breach scanning across billions of leaked records. Free tier available.

Scan now

Filter Threats

Narrow down the results by type, severity, or affected countries

Search threats by title, CVE ID, or description. Maximum 100 characters.
Active filters (1):Package: pkg:github/rebuild

Threat Intelligence

Click on any threat for detailed analysis and mitigation recommendations

CVE-2026-110611 is an authorization bypass vulnerability in the getrebuild product 'rebuild' through version 4.5.0. It affects AiBot2Controller endpoints that use a caller-supplied chatid without verifying ownership. Authenticated low-privilege users can exploit this to access or manipulate other users' AI assistant conversations.

Join the discussion
0

CVE-2026-102249 is a medium severity vulnerability in REBUILD up to version 4.4.11. It involves missing authorization checks in the /commons/file-editor-save endpoint due to manipulation of the url/fileKey argument. This flaw allows remote attackers to exploit the system without authentication. Public exploit code is available, but no vendor response or patch has been provided.

Join the discussion
0

A vulnerability was identified in Rebuild up to 4.4.7/4.5.0-beta5. This affects an unknown part of the file /user/login of the component Login Endpoint. The manipulation leads to improper authentication. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.

Join the discussion

A vulnerability was found in Rebuild up to 3.5.5 and classified as problematic. This issue affects the function QiniuCloud.getStorageFile of the file /filex/proxy-download. The manipulation of the argument url leads to information disclosure. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-252455.

Join the discussion

Showing 1 to 4 of 4 results

Filters:Package: pkg:github/rebuild
Page 1 of 1
OffSeq TrainingCredly Certified

Lead Pen Test Professional

Technical5-day eLearningPECB Accredited
View courses