Threat Intelligence Database
Comprehensive database of the latest cyber threats affecting organizations worldwide. Filter and search to find specific threat intelligence relevant to your organization.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threat Intelligence
Click on any threat for detailed analysis and mitigation recommendations
CVE-2026-107781 is a critical server-side request forgery (SSRF) and missing authorization vulnerability in Dromara Skyeye. It affects the OnlyOffice save callback function editUploadOfficeFileById, allowing unauthenticated attackers to supply arbitrary URL and key parameters. This enables attackers to make the server fetch internal URLs, overwrite any user's stored file, and read the results via queryFileToShowById. Join the discussion | CVE Database V5 | 10/08/2026, 20:15:56 UTC Added: 10/08/2026, 20:36:58 UTC |
0 CVE-2026-107780 is a critical OS command injection vulnerability in Dromara Skyeye. It affects the unauthenticated /post/TtsController/textToSpeech endpoint via the format parameter. Attackers can inject a single quote to break out of the PowerShell string and execute arbitrary commands as the Skyeye service account on Windows systems. Join the discussion | CVE Database V5 | 10/08/2026, 20:15:55 UTC Added: 10/08/2026, 20:36:58 UTC |
Dromara Skyeye version 0 contains a critical missing authentication vulnerability in certain job management endpoints. Specifically, the JobInfoController endpoints annotated with @PermissionLimit(limit = false) allow unauthenticated attackers to submit jobs that execute arbitrary commands on the executor host. This includes the ability to post GLUE_SHELL, GLUE_PYTHON, or GLUE_POWERSHELL jobs with attacker-controlled code, potentially leading to remote code execution or job disruption. Join the discussion | CVE Database V5 | 10/08/2026, 20:15:54 UTC Added: 10/08/2026, 20:36:58 UTC |
Showing 1 to 3 of 3 results