Threat Intelligence Database
Comprehensive database of the latest cyber threats affecting organizations worldwide. Filter and search to find specific threat intelligence relevant to your organization.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threat Intelligence
Click on any threat for detailed analysis and mitigation recommendations
Homer is open source telecom observability software. Prior to version 11.0.283, on every fresh Homer deployment using internal authentication, the bootstrap process automatically creates an `admin` account with the password `sipcapture` (stored as a legacy SHA-256 hex hash). There is no first-login forced-change mechanism. Any attacker who reaches the login endpoint immediately gains full administrative access. Version 11.0.283 patches the issue. Join the discussion | CVE Database V5 | 10/07/2026, 16:12:58 UTC Added: 10/07/2026, 16:34:14 UTC |
0 Homer, an open source telecom observability software, had a critical authentication bypass vulnerability prior to version 11.0.283. The JWT middleware functions would skip authentication if the JWT secret was empty, which is the default setting. This caused all protected API endpoints under /api/v1, /api/v3, and /api/v4 to be accessible without authentication. The issue was fixed in version 11.0.283. Join the discussion | CVE Database V5 | 10/07/2026, 16:11:00 UTC Added: 10/07/2026, 16:34:16 UTC |
0 Homer is open source telecom observability software. Prior to version 11.0.283, the `V4StatisticsQuery` handler passes the user-supplied `rawquery` field directly to DuckDB without calling the `sqlvalidator.ValidateRawSQL` function used throughout the rest of the codebase. Any authenticated user can execute arbitrary SQL statements against all data accessible through the FlightSQL service. Version 11.0.283 patches the issue. Join the discussion | CVE Database V5 | 10/07/2026, 16:09:41 UTC Added: 10/07/2026, 16:34:14 UTC |
Showing 1 to 3 of 3 results