Threat Intelligence Database
Comprehensive database of the latest cyber threats affecting organizations worldwide. Filter and search to find specific threat intelligence relevant to your organization.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threat Intelligence
Click on any threat for detailed analysis and mitigation recommendations
CVE-2026-53692: CWE-328 Use of Weak Hash in Redeight Redeight CMSCVE-2026-53692 0 Redeight CMS version 1.0 uses the MD5 algorithm without a salt to store user passwords. Because MD5 is a cryptographically broken algorithm and lacks salting, attackers who obtain the password hashes can trivially reverse them using rainbow tables, leading to the exposure of plaintext credentials. Join the discussion | CVE Database V5 | 06/30/2026, 11:20:00 UTC Added: 06/30/2026, 11:51:57 UTC |
CVE-2026-53691: CWE-434 Unrestricted Upload of File with Dangerous Type in Redeight Redeight CMSCVE-2026-53691 0 An Unrestricted File Upload vulnerability in Redeight CMS version 1.0 allows authenticated attackers to achieve Remote Code Execution via the POST "/admin/index.php?module=pages&mode=FileAdd" endpoint. The application fails to validate file extensions and MIME types, permitting the upload of arbitrary PHP scripts to the publicly accessible "/uploads/files/" directory where they can be executed directly by the web server. Join the discussion | CVE Database V5 | 06/30/2026, 11:19:57 UTC Added: 06/30/2026, 11:51:57 UTC |
CVE-2026-53690: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in Redeight Redeight CMSCVE-2026-53690 0 An SQL Injection vulnerability exists in Redeight CMS version 1.0 via the "userEmail" parameter in the POST "/admin/index.php" login endpoint. The application fails to sanitize user input and directly interpolates it into SQL queries without using prepared statements, which allows unauthenticated remote attackers to execute arbitrary SQL commands and extract sensitive database information. Join the discussion | CVE Database V5 | 06/30/2026, 11:19:46 UTC Added: 06/30/2026, 11:51:57 UTC |
Showing 1 to 3 of 3 results