Threat Intelligence Database
Comprehensive database of the latest cyber threats affecting organizations worldwide. Filter and search to find specific threat intelligence relevant to your organization.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threat Intelligence
Click on any threat for detailed analysis and mitigation recommendations
0 Upsonic version 0.71.6 contains a critical remote code execution vulnerability in its MCP server/task creation functionality. The vulnerability arises because users can define MCP tasks with arbitrary command and argument values. Although an allowlist restricts commands, some allowed commands like npm and npx accept argument flags that enable execution of arbitrary OS commands. This can lead to remote code execution with the privileges of the Upsonic process. Version 0.72.0 introduced a warning about the risks of using Stdio servers that can execute commands directly on the host machine. No official patch or remediation has been confirmed yet. Join the discussion | CVE Database V5 | 04/15/2026, 00:00:00 UTC Added: 04/15/2026, 15:31:52 UTC |
0 A vulnerability, which was classified as critical, has been found in Upsonic up to 0.55.6. This issue affects the function cloudpickle.loads of the file /tools/add_tool of the component Pickle Handler. The manipulation leads to deserialization. The exploit has been disclosed to the public and may be used. Join the discussion | CVE Database V5 | 06/19/2025, 21:00:14 UTC Added: 06/23/2025, 19:38:56 UTC |
0 A vulnerability classified as critical was found in Upsonic up to 0.55.6. This vulnerability affects the function os.path.join of the file markdown/server.py. The manipulation of the argument file.filename leads to path traversal. The exploit has been disclosed to the public and may be used. Join the discussion | CVE Database V5 | 06/19/2025, 20:31:05 UTC Added: 06/23/2025, 19:38:56 UTC |
Showing 1 to 3 of 3 results