Skip to content
Product
Use it
Threat intelligence API
Free key, 70+ endpoints, OpenAPI. The product.
Get started
Pick your stack, make your first call.
Live feed
The console: incidents, filters, entities, search.
Recipes
Runnable examples for the free key.
Free feeds
RSS, ransomware feed, IOC blocklist, MISP — no key.
CLI & agents
tc from a terminal; agent keys with scoped budgets.
The data
Incident records
900 articles a day become ~70 scored incidents.
Dark web
First-party leak-site collection: victims, groups, markets.
Validated IOCs
Indicators with a false-positive gate; STIX, MISP, CSV.
Vulnerabilities
CVEs with EPSS, KEV and exploit status.
Entity graph
Actors, malware, CVEs, companies — pivotable.
For teams
For service providers
Per-client feeds, alerts and branded digests.
Use cases
How teams and builders use the corpus.
About ThreatCluster
What it is and how it is built.
Pricing
Docs
Reference
OpenAPI (Swagger)
Every endpoint, parameter and response model.
ReDoc
The same reference, long-form.
Examples on GitHub
curl, Python and Node quickstarts; daily spec snapshot.
Guides
Quickstart & plans
Key, scopes, budgets, tiers.
Integrations
Splunk, Sentinel, Elastic, agents and terminals, step by step
Export formats
STIX 2.1, MISP, CSV, text.
CLI setup
Install, log in, wire an agent.
No results found
Sign in
Get a free key
No results found
Product
Threat intelligence API
Get started
Live feed
Recipes
Free feeds
CLI & agents
The data
Incident records
Dark web
Validated IOCs
Vulnerabilities
Entity graph
For teams
For service providers
Use cases
About ThreatCluster
Docs
OpenAPI (Swagger)
ReDoc
Examples on GitHub
Quickstart & plans
Integrations
Export formats
CLI setup
Pricing
Contact
Get a free key
Sign in
Back
Cwe-434 - Unrestricted Upload Of File With Dangerous Type
CWE Weakness
Threat entity extracted from intelligence sources
Sep 7: 7 mentions
Sep 8: 5 mentions
Sep 9: 1 mention
Sep 10: 0 mentions
Sep 11: 0 mentions
Sep 12: 0 mentions
Sep 13: 0 mentions
Sep 7
Sep 10
Sep 13
Entities
›
cwe
›
Cwe-434 - Unrestricted Upload Of File With Dangerous Type
Frequency
57
occurrences
First Seen
April 19, 2026
Last Seen
September 9, 2026
API
Overview
Recent Events
Profile
Profile
MITRE ATT&CK
1 / 2
Tools
Git-lfs
Curl
SimpleHelp
Docker
Claude Code
CVEs
CVE-2026-15748
CVE-2026-32475
CVE-2026-49827
CVE-2026-58480
CVE-2026-5524
CVE-2018-25332
CVE-2026-69518
CVE-2026-3055
Regions
Thailand
Vietnam
South Korea
Singapore
Palau
Sectors
Government
Technology
-
REC
Recon
No techniques detected
-
RD
Resource Dev
No techniques detected
2
IA
Initial Access
T1190 - Exploit Public-Facing Application
T1078 - Valid Accounts
3
EX
Execution
T1059 - Command and Scripting Interpreter
T1203 - Exploitation for Client Execution
T1053 - Scheduled Task/Job
2
PE
Persistence
T1505.003 - Web Shell
T1547 - Boot Or Logon Autostart Execution
1
PE
Priv Esc
T1068 - Exploitation for Privilege Escalation
-
DE
Defense Evasion
No techniques detected
3
CA
Cred Access
T1110 - Brute Force
T1003 - OS Credential Dumping
T1552.001 - Credentials In Files
-
DI
Discovery
No techniques detected
-
LM
Lateral Mov
No techniques detected
-
CO
Collection
No techniques detected
1
C2
C2
T1071 - Application Layer Protocol
1
EX
Exfil
T1041 - Exfiltration Over C2 Channel
-
IM
Impact
No techniques detected
13
techniques detected across
7
tactics
Related Clusters (41)
Critical Joomla JCE Vulnerability Under Active Exploitation
Jun 17
·
33 sources
87
Critical RCE Vulnerability in Divi Form Builder Plugin for WordPress
Jul 3
·
9 sources
78
GeoNetwork Vulnerabilities Enable Unauthenticated RCE in Government Systems
Sep 2
·
6 sources
78
Critical RCE Vulnerabilities Under Active Exploitation
Sep 6
·
3 sources
78
Critical RCE Vulnerability in Blocksy Companion Pro Plugin Discovered
Jul 9
·
2 sources
78
New Vulnerabilities Discovered in Serial-to-IP Converters Threaten Critical Infrastructure
Apr 21
·
9 sources
78
CISA Alerts on Critical Flaws in SimpleHelp, Samsung MagicINFO, and D-Link Devices
Apr 26
·
3 sources
78
Critical Remote Code Execution Vulnerability in GitBucket Disclosed
May 17
·
2 sources
77
Critical OVERPASS Vulnerability in SAP Kernel Requires Immediate Action
5d ago
·
17 sources
76
UAT-10147 Cybercrime Group Integrates AI for Large-Scale Attacks
Aug 20
·
10 sources
75
Multiple Critical CVEs Exploited in Cybersecurity Attacks
6d ago
·
45 sources
75
Active Exploitation of Magento Zero-Day Vulnerability 'StyleSmuggler'
Sep 5
·
39 sources
74
Critical wp2shell Vulnerability Enables Unauthenticated RCE in WordPress
Jul 20
·
78 sources
73
Critical Exploitation of Ruby on Rails Vulnerability CVE-2026-66066 Confirmed
Aug 31
·
5 sources
73
Microsoft September 2026 Patch Tuesday: Record 974 Vulnerabilities Addressed
5d ago
·
82 sources
73
Critical RCE Vulnerability in Vvveb CMS v1.0.8 Discovered
Apr 21
·
4 sources
73
Critical RCE Vulnerability in WebErpMesv2 Affects Self-Registered Users
Aug 14
·
2 sources
73
CISA Warns of Active Exploitation of Cisco Catalyst SD-WAN Vulnerabilities
Apr 21
·
16 sources
72
Critical Unauthenticated File Upload Vulnerability in RSFiles! Fixed
Jul 10
·
2 sources
72
Critical Vulnerabilities in WordPress Plugins Allow Unauthenticated File Uploads
Aug 20
·
26 sources
72
Critical CVE-2026-76658 Vulnerability in HPE Fabric Composer
Sep 2
·
2 sources
72
Critical Vulnerabilities Disclosed: CVE-2026-16327 and CVE-2026-65687
Jul 23
·
2 sources
71
Critical RCE Vulnerability in WordPress Plugin CVE-2026-6518
Apr 19
·
2 sources
71
Mass Exploitation of Gravity SMTP Plugin Vulnerability CVE-2026-4020
Jun 17
·
15 sources
71
SAP Addresses Critical Vulnerabilities in Commerce Cloud and S/4HANA
May 12
·
6 sources
71
Seiko SkyBridge IoT Routers Face Permanent OS Injection Vulnerability
Jul 4
·
2 sources
71
Critical Remote Code Execution Vulnerabilities in WordPress Plugins Identified
Jun 8
·
7 sources
70
Multiple Ransomware Attacks Target Diverse Industries in September 2026
Sep 3
·
100 sources
70
CWE-434: Unrestricted File Upload Vulnerability Exploited
Apr 17
·
4 sources
69
New macOS Malware Campaign Targets Users via Fake Updates and Script Editor
Apr 9
·
43 sources
69
Multiple CVEs Discovered in light0011 CMS Affecting Remote Authentication and File Upload
5d ago
·
12 sources
69
Multiple WordPress Plugins Vulnerable to Unauthenticated RCE via PHP Uploads
Aug 20
·
2 sources
68
Critical RCE Vulnerability in BeyondTrust Software Requires Immediate Patching
Feb 9
·
1495 sources
67
DeepSeek AI Used in Autonomous Cyberattack Campaign by Chinese Threat Actor
Aug 2
·
12 sources
60
Unauthorized File Upload Vulnerability in U+Smart Enjoyment Website
6d ago
·
4 sources
58
Telerik UI Vulnerability Chain Enables Unauthenticated RCE Attacks
6d ago
·
5 sources
58
Path Traversal Vulnerabilities Exploited in Web Applications
5d ago
·
5 sources
56
AI Guardrails Easily Bypassed by Cybercriminals, Cisco Talos Reports
Aug 5
·
2 sources
52
Microsoft Launches Cloud Web Applications Threat Matrix
3d ago
·
2 sources
43
SSL2BUY Releases Guide to Combat eCommerce Cybersecurity Threats
Jul 26
·
2 sources
43
Critical RCE Vulnerability in BeyondTrust Remote Support and PRA
Feb 7
·
717 sources
30
Prev
1 / 9
Next
Related Articles (50)
Threat Matrix: Mapping threats across cloud web applications
Blogs.Microsoft
·
4d ago
Microsoft Patch Tuesday for September 2026
Blog.Talosintelligence
·
5d ago
CWE-36: Absolute Path Traversal
cwe.mitre.org
·
5d ago
CWE-23: Relative Path Traversal
cwe.mitre.org
·
5d ago
September 2026 security updates
support.sap.com
·
5d ago
9
github.com
·
5d ago
CVE Alert: CVE-2026-86305 – light0011
Redpacketsecurity
·
5d ago
CVE-2026
Sploitus
·
6d ago
CVE-2019-18935
bishopfox.com
·
6d ago
DragonForce Ransomware | Group Profile, Cartel Alliance & Attack Analysis (2026)
Dexpose
·
6d ago
IYaow PR6licb C3kdw3xc Jp Q7n6b
ucn9h68n9289.feishu.cn
·
6d ago
CVE Alert: CVE-2026-86272 – Beijing Meite Software Technology – U+Smart Enjoyment WebSite
Redpacketsecurity
·
6d ago
CVE-2026
Sploitus
·
6d ago
[SecurityIntel] 06 Sep | Active Zero
Buttondown
·
Sep 6
StyleSmuggler: Magento and Adobe Commerce 0-day RCE under active attack
Sansec
·
Sep 5
CVE-2026-76658: Critical HPE Fabric Composer Flaw
Socprime
·
Sep 2
Geonetwork Preauth RCE
ethiack.com
·
Sep 2
GHSA Mh22 Prqr Vf42
github.com
·
Sep 2
2026 08 07
docs.vulncheck.com
·
Aug 31
Elementor Pro CVE-2026
Op-C
·
Aug 21
WordPress plugin Elementor Pro vulnerability: 6 million websites at risk
Heise.De
·
Aug 21
Critical vulnerability in Elementor Pro allows unauthenticated file upload and RCE
Feeds.Feedburner
·
Aug 21
UAT-10147: Chinese-speaking adversary integrates agentic AI into post
Blog.Talosintelligence
·
Aug 20
CVE-2026-15748: Forminator File Upload Flaw
Socprime
·
Aug 19
Critical Unauthenticated File Upload to RCE in Elementor Pro Plugin
Patchstack
·
Aug 19
Unauthenticated RCE Vulnerability Patched in Forminator Forms Plugin
Beyondmachines
·
Aug 19
Critical WordPress Plugin Vulnerability Exposes 600,000 Sites to File Upload Attacks
Cybersecuritynews
·
Aug 18
WordPress plugin Forminator Forms: Critical vulnerability allows code smuggling
Heise.De
·
Aug 18
Forminator WordPress Flaw Can Enable Unauthenticated RCE via Malicious PHP Uploads
Thehackernews
·
Aug 17
CVE-2026-49827 - WebErpMesv2 has Unauthenticated RCE via Unrestricted File Upload in HR Expense scan_file (CWE-434) Latest High/Critical Vulnerabilitiy Feed / 10h CVE ID : CVE-2026-49827 Published : Aug. 13, 2026, 1:19 p.m. 16 minutes ago Description : WebErpMesv2 is a Resource Management and Manufacturing execution system Web for industry. Versions 1.19 and prior allow any self-registered user to upload arbitrary PHP files through the HR Expense scan_file parameter, leading to Remote Code Execu
cvefeed.io
·
Aug 14
CVE-2026-49827 - Exploits & Severity
Feedly
·
Aug 13
Hephaestus Automated Attack Framework Targeting Government And Educational Institutions In Indonesia
oasis-security.io
·
Aug 6
BleepingComputer summarised the finding
www.bleepingcomputer.com
·
Aug 2
SSL2BUY Releases New Guide Help eCommerce Businesses Strengthen Website Security ...
Webdisclosure
·
Jul 26
SSL2BUY Releases New Guide Help eCommerce Businesses Strengthen Website Security ...
Webdisclosure
·
Jul 26
CVE-2026-16327: HIGH (CVSS 7.3)
Echelongraph
·
Jul 21
Patchstack’s analysis
patchstack.com
·
Jul 21
434
cwe.mitre.org
·
Jul 11
Wordpress Blocksy Companion Plugin 2 1 46 Unauthenticated Arbitrary File Upload Vulnerability
patchstack.com
·
Jul 9
CVE-2026-58480
nvd.nist.gov
·
Jul 9
CVE-2026-58480: Blocksy Companion Pro plugin Remote code execution
Sherlockforensics
·
Jul 9
JVN#40604023 prior disclosure
jvn.jp
·
Jul 5
CVE-2026-5524 INCIBE-CERT - Vulnerabilities RSS / 22h The Divi Form Builder plugin for WordPress is vulnerable to Arbitrary File Upload leading to Remote Code Execution in all versions up to and including 5.1.8. Attackers can specify PHP-executable extensions such as .phtml, .phar, .php5, or .php7 to bypass the plugin's .htaccess protection which only blocks .php files specifically.
www.incibe.es
·
Jul 3
CVE-2026-5524 - Exploits & Severity
Feedly
·
Jul 2
Cisco Unified CM Flaw Faces Active Exploitation After PoC Release
Mallory.Ai
·
Jun 24
According to mySites.guru
mysites.guru
·
Jun 17
CVE-2024-58348: Unrestricted Upload of File with Dangerous Type in background
Radar.Offseq
·
Jun 8
CVE-2018-25332 (CRITICAL)
Cve.Tools
·
May 17
CRITICAL: CVE-2018-25332 (CVSS 9.8) — multiple products
Lyrie.Ai
·
May 17
SAP Patchday: Critical vulnerabilities allow unauthorized login
Heise.De
·
May 12
Prev
1 / 10
Next
Related Entities
Zero-day Exploit
Malware
Data Breach
Sql Injection
Remote Code Execution
Phishing
Server-Side Request Forgery
Improper Authentication
Ransomware
Elevation Of Privilege
Privilege Escalation
Denial of Service
