Threat Intelligence Database
Comprehensive database of the latest cyber threats affecting organizations worldwide. Filter and search to find specific threat intelligence relevant to your organization.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threat Intelligence
Click on any threat for detailed analysis and mitigation recommendations
0 A security flaw has been discovered in DedeCMS 5.7.118. Affected by this vulnerability is the function ExtractFile of the file include/zip.class.php of the component Album Publishing Feature. The manipulation of the argument filename results in path traversal. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks. Join the discussion | CVE Database V5 | 07/14/2026, 16:15:07 UTC Added: 07/14/2026, 16:48:06 UTC |
0 DedeCMS version 5.7.118 contains a code injection vulnerability in the /plus/search.php file within the Column Management component. The vulnerability arises from improper handling of the 'Column Name' argument, allowing remote attackers to inject code. This issue has a medium severity rating with a CVSS score of 5.1. No official patch or remediation guidance is currently available, and public exploit code has been released. Join the discussion | CVE Database V5 | 07/13/2026, 04:45:06 UTC Added: 07/13/2026, 05:18:05 UTC |
0 A security flaw has been discovered in DedeCMS 5.7.88. This affects the function RemoveXSS of the file /plus/carbuyaction.php. The manipulation of the argument postname/des results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks. Join the discussion | CVE Database V5 | 06/02/2026, 18:00:10 UTC Added: 06/02/2026, 19:52:44 UTC |
0 A vulnerability was identified in DedeCMS 5.7.88. The impacted element is the function dede_htmlspecialchars of the file /plus/flink.php. The manipulation of the argument msg leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might be used. Join the discussion | CVE Database V5 | 06/02/2026, 17:45:05 UTC Added: 06/02/2026, 19:52:44 UTC |
0 A vulnerability was determined in DedeCMS 5.7.88. The affected element is the function TrimMsg of the file /plus/feedback.php of the component Feedback Handler. Executing a manipulation of the argument msg can lead to sql injection. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized. Join the discussion | CVE Database V5 | 06/02/2026, 16:30:08 UTC Added: 06/02/2026, 17:18:44 UTC |
0 DedeCMS version 5.7.88 contains a server-side request forgery (SSRF) vulnerability in the base64_decode function within /plus/download.php when the 'Link' parameter is manipulated. This flaw allows remote attackers to cause the server to make unintended requests. The vulnerability has a medium severity score of 5.3 and an exploit has been published. No official patch or remediation guidance is currently provided by the vendor. Join the discussion | CVE Database V5 | 06/02/2026, 02:30:08 UTC Added: 06/02/2026, 03:48:36 UTC |
0 DedeCMS v5.7.118 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability in /sys_task_add.php. Join the discussion | CVE Database V5 | 03/24/2026, 00:00:00 UTC Added: 03/24/2026, 16:01:47 UTC |
0 An issue in DedeCMS v.5.7.118 and before allows a remote attacker to execute arbitrary code via the array_filter component Join the discussion | CVE Database V5 | 03/19/2026, 00:00:00 UTC Added: 03/19/2026, 17:39:31 UTC |
0 A vulnerability was identified in DedeCMS up to 5.7.118. This impacts an unknown function of the file /freelist_main.php. The manipulation of the argument orderby leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. Join the discussion | CVE Database V5 | 12/22/2025, 00:02:08 UTC Added: 12/22/2025, 00:27:03 UTC |
0 DedeCMS V5.7.115 has a command execution vulnerability via file_manage_view.php?fmdo=newfile&activepath. Join the discussion | CVE Database V5 | 08/23/2024, 00:00:00 UTC Added: 02/25/2026, 21:42:32 UTC |
Showing 1 to 10 of 14 results