Threat Intelligence Database
Comprehensive database of the latest cyber threats affecting organizations worldwide. Filter and search to find specific threat intelligence relevant to your organization.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threat Intelligence
Click on any threat for detailed analysis and mitigation recommendations
CVE-2026-59327: CWE-312 Cleartext Storage of Sensitive Information in Spring Spring Tools for EclipseCVE-2026-59327 0 Spring Tools for Eclipse versions 5.2.0 and earlier store the Spring Boot DevTools remote secret in cleartext within Eclipse launch configuration files. These files are saved as XML in the workspace metadata or project directories, potentially exposing the secret if accessed via filesystem, backups, or version control. The secret protects the DevTools remote restart/reload endpoint, which can execute arbitrary class bytes on the target application. Exposure of this secret could allow an attacker with read access to the .launch file to perform remote code execution on the associated Spring Boot application. Join the discussion | CVE Database V5 | 07/30/2026, 05:29:20 UTC Added: 07/30/2026, 06:24:12 UTC |
CVE-2026-47882: CWE-338 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in Spring Spring Tools for EclipseCVE-2026-47882 0 CVE-2026-47882 is a high-severity vulnerability in Spring Tools for Eclipse versions 5.2.0 and earlier. It involves the use of a non-cryptographic pseudo-random number generator to create a shared secret for authenticating Spring Boot DevTools remote-restart uploads. This weak randomness source undermines the cryptographic strength of the secret, potentially allowing attackers to predict or reproduce it. No official patch or remediation guidance is currently available from the vendor. Join the discussion | CVE Database V5 | 07/30/2026, 05:26:07 UTC Added: 07/30/2026, 06:24:12 UTC |
CVE-2026-47873: CWE-1327 Binding to an Unrestricted IP Address in Spring Spring Tools for EclipseCVE-2026-47873 0 CVE-2026-47873 is a high-severity vulnerability in Spring Tools for Eclipse (version 5.2.0 and earlier) where the Boot Dashboard Docker integration publishes container control ports on all network interfaces (0.0.0.0) instead of restricting them to the loopback interface. This exposure could allow remote attackers on the same network to access these control ports. Join the discussion | CVE Database V5 | 07/30/2026, 05:23:59 UTC Added: 07/30/2026, 06:24:12 UTC |
Showing 1 to 3 of 3 results