Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

AlienVault OTX General

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

jeesite

An issue in the fileEntityId parameter in the /a/file/upload endpoint of JeeSite v5.15.1 allows authenticated attackers with file upload permissions to execute a path traversal and write arbitrary files with whitelisted suffixes to arbitrary filesystem locations.

CVE-2026-36762 is a path traversal vulnerability affecting JeeSite version 5.15.1. It arises from insufficient validation of the fileEntityId parameter in the /a/file/upload endpoint, allowing authenticated attackers with file upload permissions to write files with whitelisted suffixes to arbitrary filesystem locations. This can lead to unauthorized file creation or modification, impacting system confidentiality, integrity, and availability. The vulnerability is classified under CWE-22 (Improper Limitation of a Pathname to a Restricted Directory). The CVSS v3.1 base score is 8.8, reflecting network attack vector, low attack complexity, required privileges, no user interaction, and high impact on confidentiality, integrity, and availability. No patch or official remediation has been published yet.

Detailed information about CVE-2026-36762: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2026-36762: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-36762: n/a

A stored cross-site scripting (XSS) vulnerability in the /msg/msgInner/save endpoint of JeeSite v5.15.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted input into the msgContent parameter.

This vulnerability involves stored XSS in JeeSite v5.15.1 at the /msg/msgInner/save endpoint. Attackers can inject crafted input into the msgContent parameter, which is then stored and later executed in users' browsers. This can lead to script execution within the application context. The CVE entry does not provide a CVSS score or detailed remediation information, and no patch links are available. The affected version is specified as 5.15.1, but no other version details are provided.

Detailed information about CVE-2026-36761: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2026-36761: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-36761: n/a

An issue in the fileMd5 parameter in the /a/file/upload endpoint of JeeSite v5.15.1 allows authenticated attackers with file upload permissions to execute a path traversal and write arbitrary files with whitelisted suffixes to arbitrary filesystem locations while chunked upload is enabled.

This vulnerability involves improper validation of the fileMd5 parameter in the /a/file/upload endpoint of JeeSite v5.15.1. Authenticated attackers who have permission to upload files can perform a path traversal attack when chunked upload is enabled. This allows them to write files with allowed suffixes to arbitrary filesystem paths, potentially leading to unauthorized file creation or modification. The vulnerability is confirmed published but lacks a CVSS score and vendor remediation details.

Detailed information about CVE-2026-36760: n/a. Get real-time updates, technical details, and mitigation strategies.


CVE-2026-36762: n/aCVE-2026-36762 0 An issue in the fileEntityId parameter in the /a/file/upload endpoint of JeeSite v5.15.1 allows authenticated attackers with file upload permissions to execute a path traversal and write arbitrary files with whitelisted suffixes to arbitrary filesystem locations. HighVulnerability#cve #cve-2026-36762 Join the discussion	CVE Database V5	04/30/2026, 00:00:00 UTC Added: 04/30/2026, 17:51:25 UTC
CVE-2026-36761: n/aCVE-2026-36761 0 A stored cross-site scripting (XSS) vulnerability in the /msg/msgInner/save endpoint of JeeSite v5.15.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted input into the msgContent parameter. MediumVulnerability#cve #cve-2026-36761 Join the discussion	CVE Database V5	04/30/2026, 00:00:00 UTC Added: 04/30/2026, 17:51:25 UTC
CVE-2026-36760: n/aCVE-2026-36760 0 An issue in the fileMd5 parameter in the /a/file/upload endpoint of JeeSite v5.15.1 allows authenticated attackers with file upload permissions to execute a path traversal and write arbitrary files with whitelisted suffixes to arbitrary filesystem locations while chunked upload is enabled. CriticalVulnerability#cve #cve-2026-36760 Join the discussion	CVE Database V5	04/30/2026, 00:00:00 UTC Added: 04/30/2026, 17:22:41 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional