Threat Intelligence Database
Comprehensive database of the latest cyber threats affecting organizations worldwide. Filter and search to find specific threat intelligence relevant to your organization.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Search Results: "8443"
Click on any threat for detailed analysis and mitigation recommendations
CVE-2026-8443: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in https://wpreviewslider.com/ WP Review Slider ProCVE-2026-8443 0 The WP Review Slider Pro plugin for WordPress is vulnerable to SQL Injection via the 'stypes' and 'slocations' parameters of the wppro_get_overall_chart_data AJAX action in versions up to, and including, 12.6.8. This is due to the use of stripslashes() on user-supplied JSON strings prior to json_decode(), which removes the escaping applied by WordPress's wp_magic_quotes; the resulting decoded array values are then concatenated directly into SQL WHERE clauses without parameterization, and the constructed query is executed via $wpdb->get_results() without $wpdb->prepare(). This makes it possible for authenticated attackers, with Subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. The handler also returns the executed SQL string in its JSON response, which simplifies oracle construction for blind exploitation. Join the discussion | CVE Database V5 | 06/16/2026, 05:33:32 UTC Added: 06/16/2026, 06:00:19 UTC |
CVE-2024-38443: n/aCVE-2024-38443 0 C/sorting/binary_insertion_sort.c in The Algorithms - C through e5dad3f has a segmentation fault for deep recursion, which may affect common use cases such as sorting an array of 50 elements. Join the discussion | CVE Database V5 | 06/16/2024, 00:00:00 UTC Added: 02/25/2026, 21:41:13 UTC |
CVE-2024-8443: Heap-based Buffer OverflowCVE-2024-8443 0 A heap-based buffer overflow vulnerability was found in the libopensc OpenPGP driver. A crafted USB device or smart card with malicious responses to the APDUs during the card enrollment process using the `pkcs15-init` tool may lead to out-of-bound rights, possibly resulting in arbitrary code execution. Join the discussion | CVE Database V5 | 09/10/2024, 13:16:51 UTC Added: 10/10/2025, 13:40:55 UTC |
CVE-2025-8443: SQL Injection in code-projects Online Medicine GuideCVE-2025-8443 0 A vulnerability was found in code-projects Online Medicine Guide 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the argument uname leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Join the discussion | CVE Database V5 | 08/01/2025, 08:32:05 UTC Added: 08/01/2025, 08:47:45 UTC |
CVE-2025-48443: CWE-64: Windows Shortcut Following in Trend Micro, Inc. Trend Micro Password ManagerCVE-2025-48443 0 Trend Micro Password Manager (Consumer) version 5.0.0.1266 and below is vulnerable to a Link Following Local Privilege Escalation Vulnerability that could allow a local attacker to leverage this vulnerability to delete files in the context of an administrator when the administrator installs Trend Micro Password Manager. Join the discussion | CVE Database V5 | 06/17/2025, 20:34:35 UTC Added: 06/17/2025, 20:49:34 UTC |
Showing 1 to 5 of 5 results