Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

AlienVault OTX General

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Microsoft Security Blog

Google Project Zero

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

schemahero

SQL Injection vulnerability in SchemaHero 0.23.0 via the column parameter to the mysqlColumnAsInsert function in file plugins/mysql/lib/column.go.

CVE-2026-33643 is a security vulnerability classified as an SQL Injection flaw in SchemaHero version 0.23.0. The issue resides in the mysqlColumnAsInsert function located in the plugins/mysql/lib/column.go source file. This function improperly handles the 'column' parameter, failing to adequately sanitize or validate input before incorporating it into SQL statements. As a result, an attacker can craft malicious input that alters the intended SQL query logic, potentially executing arbitrary SQL commands against the backend MySQL database. SQL Injection vulnerabilities are critical because they can lead to unauthorized data disclosure, data modification, or even full system compromise depending on database privileges. Although no exploits have been reported in the wild yet, the vulnerability is publicly disclosed and could be targeted by attackers once details become widely known. SchemaHero is a Kubernetes schema migration tool used to manage database schemas declaratively, often in cloud-native environments. The affected version is 0.23.0, and no patch links are currently available, indicating that remediation may still be pending. The lack of a CVSS score requires an independent severity assessment based on the vulnerability characteristics. Since the vulnerability allows injection without authentication and can impact data confidentiality and integrity, it represents a significant risk to organizations using SchemaHero with MySQL databases.

Detailed information about CVE-2026-33643: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2026-33643: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-33643: n/a

SQL Injection vulnerability in SchemaHero 0.23.0 via the column parameter to the columnAsInsert function in file plugins/postgres/lib/column.go.

CVE-2026-29953 is an SQL Injection vulnerability identified in SchemaHero version 0.23.0, a Kubernetes schema migration tool that manages database schemas declaratively. The flaw exists in the columnAsInsert function located in the plugins/postgres/lib/column.go file, where the 'column' parameter is not properly sanitized before being incorporated into SQL statements. This improper handling allows an attacker to inject arbitrary SQL commands, potentially leading to unauthorized data retrieval, modification, or deletion within the PostgreSQL databases managed by SchemaHero. Since SchemaHero operates as part of infrastructure automation in cloud-native environments, exploitation could compromise critical database integrity and confidentiality. Although no public exploits have been reported yet, the vulnerability is publicly disclosed and could be targeted by attackers. The absence of a CVSS score necessitates an independent severity assessment. The vulnerability does not require authentication or user interaction, increasing its risk profile. The scope includes all deployments running the affected SchemaHero version managing PostgreSQL schemas. No official patches or mitigations have been published at the time of disclosure, emphasizing the need for immediate attention by users.

Detailed information about CVE-2026-29953: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2026-29953: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-29953: n/a


CVE-2026-33643: n/aCVE-2026-33643 0 SQL Injection vulnerability in SchemaHero 0.23.0 via the column parameter to the mysqlColumnAsInsert function in file plugins/mysql/lib/column.go. HighVulnerabilityUnited StatesGermanyUnited Kingdom+7#cve #cve-2026-33643 Join the discussion	CVE Database V5	03/30/2026, 00:00:00 UTC Added: 03/30/2026, 16:23:20 UTC
CVE-2026-29953: n/aCVE-2026-29953 0 SQL Injection vulnerability in SchemaHero 0.23.0 via the column parameter to the columnAsInsert function in file plugins/postgres/lib/column.go. HighVulnerabilityUnited StatesGermanyJapan+7#cve #cve-2026-29953 Join the discussion	CVE Database V5	03/30/2026, 00:00:00 UTC Added: 03/30/2026, 16:23:20 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional