Threat Intelligence Database
Comprehensive database of the latest cyber threats affecting organizations worldwide. Filter and search to find specific threat intelligence relevant to your organization.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threat Intelligence
Click on any threat for detailed analysis and mitigation recommendations
0 Ghost, a Node.js content management system, contains a path traversal vulnerability in versions from 1.20.1 up to but not including 6.54.1. An administrator-level user could exploit this flaw by supplying a crafted database backup filename containing path separators, allowing remote overwriting of certain filesystem files. This vulnerability affects the integrity and availability of the system. The issue is fixed in version 6.54.1. Join the discussion | CVE Database V5 | 08/04/2026, 21:41:27 UTC Added: 08/05/2026, 12:51:02 UTC |
A Server-Side Request Forgery (SSRF) vulnerability exists in TryGhost Ghost versions from 0.10.0 up to but not including 6.54.1. This flaw allows any staff-level user to perform blind HTTP GET requests to internal hosts via the Ghost Admin image fetching functionality. Although no response data is returned, the vulnerability could be used to probe internal network ports. The issue is resolved in version 6.54.1. Join the discussion | CVE Database V5 | 08/04/2026, 21:37:53 UTC Added: 08/05/2026, 12:51:02 UTC |
0 CVE-2026-24778 is a high-severity cross-site scripting (XSS) vulnerability in the TryGhost Ghost CMS and its Portal component. It affects Ghost versions 5.43.0 through 5.12.04 and 6.0.0 through 6.14.0, as well as Portal versions 2. Join the discussion | CVE Database V5 | 01/27/2026, 21:57:45 UTC Added: 01/27/2026, 22:06:00 UTC |
0 Ghost is a Node.js content management system. In versions 5.90.0 through 5.130.5 and 6.0.0 through 6.10.3, a vulnerability in Ghost's /ghost/api/admin/members/events endpoint allows users with authentication credentials for the Admin API to execute arbitrary SQL. This issue has been patched in versions 5.130.6 and 6.11.0. Join the discussion | CVE Database V5 | 01/10/2026, 02:57:19 UTC Added: 01/10/2026, 03:14:23 UTC |
0 Ghost through 5.85.1 allows remote attackers to bypass an authentication rate-limit protection mechanism by using many X-Forwarded-For headers with different values. NOTE: the vendor's position is that Ghost should be installed with a reverse proxy that allows only trusted X-Forwarded-For headers. Join the discussion | CVE Database V5 | 06/16/2024, 00:00:00 UTC Added: 02/25/2026, 21:40:32 UTC |
0 Ghost through 5.76.0 allows stored XSS, and resultant privilege escalation in which a contributor can take over any account, via an SVG profile picture that contains JavaScript code to interact with the API on localhost TCP port 3001. NOTE: The discoverer reports that "The vendor does not view this as a valid vector." Join the discussion | CVE Database V5 | 02/11/2024, 00:00:00 UTC Added: 02/25/2026, 21:44:49 UTC |
Showing 1 to 6 of 6 results