Threat Intelligence Database
Comprehensive database of the latest cyber threats affecting organizations worldwide. Filter and search to find specific threat intelligence relevant to your organization.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threat Intelligence
Click on any threat for detailed analysis and mitigation recommendations
CVE-2026-78062: Hard-coded Credentials in vas3k TaxHackerCVE-2026-78062 0 CVE-2026-78062 is a medium severity vulnerability in vas3k TaxHacker versions 0.8.0, 0.8.1, and 0.8.2. It involves hard-coded credentials due to manipulation of the BETTER_AUTH_SECRET argument in the envSchema.parse function within the JWT Secret Handler component. The vulnerability can be exploited remotely. The project has been informed but has not yet responded. The product is a cloud service, and a patch is available. Join the discussion | CVE Database V5 | 08/23/2026, 04:15:10 UTC Added: 08/23/2026, 04:42:56 UTC |
CVE-2026-78061: Server-Side Request Forgery in vas3k TaxHackerCVE-2026-78061 0 CVE-2026-78061 is a server-side request forgery (SSRF) vulnerability in vas3k TaxHacker versions 0.8.0, 0.8.1, and 0.8.2. The flaw exists in the buildImapConfig function within the Email Sync component, where manipulation of the host or port arguments can lead to SSRF. This vulnerability can be exploited remotely. A patch has been developed but is pending acceptance. The product is a cloud service, so remediation may be managed by the vendor. Join the discussion | CVE Database V5 | 08/23/2026, 03:45:09 UTC Added: 08/23/2026, 03:52:39 UTC |
Showing 1 to 2 of 2 results