Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

Kaspersky Security Blog

Check Point Research

Reddit NetSec

CVE Database V5

AlienVault OTX General

Reddit InfoSec News

SANS ISC Handlers Diary

SecurityWeek

Dark Reading

Threatpost

Exploit-DB RSS Feed

The Hacker News

ThreatFox MISP Feed

CIRCL OSINT Feed

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in NCP-HG100 1.4.48.16 and earlier. If exploited, a remote attacker who has obtained the authentication information to log in to the management page of the product may execute an arbitrary OS command with root privileges.

CVE-2025-64444 is an OS command injection vulnerability identified in Sony Network Communications Inc.'s NCP-HG100 Cellular model firmware versions 1.4.48.16 and earlier. The vulnerability stems from improper neutralization of special characters within OS commands constructed by the device's management interface. When an attacker authenticates to the management page, they can inject malicious OS commands that the device executes with root privileges, effectively granting full control over the device. This type of vulnerability allows attackers to compromise device confidentiality, integrity, and availability by executing arbitrary commands, potentially leading to data theft, device manipulation, or denial of service. The vulnerability requires valid credentials to access the management interface, which raises the bar for exploitation but does not eliminate risk, especially if credential theft or weak authentication mechanisms exist. The CVSS v3.0 score of 7.2 (AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) indicates a network attack vector with low complexity but requiring high privileges (authenticated user), no user interaction, and high impact on confidentiality, integrity, and availability. No public exploits have been reported yet, but the vulnerability is published and known since November 2025. The lack of available patches at the time of disclosure increases the urgency for defensive measures. The affected product is used in cellular network communications, which may be part of critical infrastructure or enterprise network environments.

Detailed information about CVE-2025-64444: Improper neutralization of special elements used in an OS command ('OS Command Injection') in Sony Network Communicat

CVE-2025-64444: Improper neutralization of special elements used in an OS command ('OS Command Injection') in Sony Network Communications Inc. NCP-HG100/Cellular model - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-64444: Improper neutralization of special elements used in an OS command ('OS Command Injection') in Sony Network Communications Inc. NCP-HG100/Cellular model

IQ-Support developed by IQ Service International has an Arbitrary File Read vulnerability, allowing unauthenticated remote attackers to exploit Relative Path Traversal to download arbitrary system files.

CVE-2025-13161 is a vulnerability classified under CWE-23 (Relative Path Traversal) affecting IQ-Support version 1.0, a product developed by IQ Service International. The flaw allows unauthenticated remote attackers to exploit improper input validation in file path handling, enabling them to traverse directories and read arbitrary files from the underlying operating system. This arbitrary file read vulnerability can expose sensitive configuration files, credentials, or other critical data stored on the server. The vulnerability requires no privileges or user interaction, making it highly accessible to attackers over the network. The CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N) indicates network attack vector, low complexity, no authentication, no user interaction, and a high impact on confidentiality, with no impact on integrity or availability. Although no public exploits have been reported yet, the ease of exploitation and the potential for sensitive data disclosure make this a significant threat. The lack of available patches at the time of publication necessitates immediate mitigation through compensating controls. The vulnerability's presence in version 1.0 suggests that organizations running this initial release are vulnerable until updates or patches are issued. Given the nature of the flaw, attackers could leverage this to gain intelligence for further attacks or to compromise systems indirectly by harvesting sensitive information.

Detailed information about CVE-2025-13161: CWE-23 Relative Path Traversal in IQ Service International IQ-Support affecting IQ Service International IQ-Support. 

CVE-2025-13161: CWE-23 Relative Path Traversal in IQ Service International IQ-Support - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-13161: CWE-23 Relative Path Traversal in IQ Service International IQ-Support

IQ-Support developed by IQ Service International has a Exposure of Sensitive Information vulnerability, allowing unauthenticated remote attackers to access specific APIs to obtain sensitive information from the internal network.

CVE-2025-13160 is a vulnerability identified in IQ-Support version 1.0, a product developed by IQ Service International. The flaw involves an exposure of sensitive system information (CWE-497) through unauthenticated access to specific APIs. Attackers can remotely connect to the affected system without any authentication or user interaction and retrieve sensitive internal network data. This vulnerability arises due to insufficient access controls on certain API endpoints, allowing unauthorized entities to query information that should be restricted. The vulnerability affects confidentiality but does not impact integrity or availability directly. The CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N) indicates network attack vector, low attack complexity, no privileges or user interaction required, and low impact on confidentiality. No known exploits have been observed in the wild yet, and no official patches have been released. The exposure of sensitive information could facilitate reconnaissance activities by attackers, potentially leading to more severe follow-on attacks such as lateral movement or targeted intrusions. IQ-Support is typically used for support and diagnostic purposes, often within internal enterprise environments, making the exposure of internal network details particularly concerning. The vulnerability was published on November 14, 2025, and assigned by TW-CERT. Organizations running IQ-Support 1.0 should assess their exposure and implement mitigations promptly.

Detailed information about CVE-2025-13160: CWE-497 Exposure of Sensitive System Information to an Unauthorized Control Sphere in IQ Service International IQ-Sup

CVE-2025-13160: CWE-497 Exposure of Sensitive System Information to an Unauthorized Control Sphere in IQ Service International IQ-Support - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-13160: CWE-497 Exposure of Sensitive System Information to an Unauthorized Control Sphere in IQ Service International IQ-Support

Inappropriate implementation in Compositing in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)

CVE-2025-13107 is a security vulnerability identified in Google Chrome's compositing implementation prior to version 140.0.7339.80. The compositing process in browsers is responsible for rendering visual elements on the screen by combining various layers efficiently. An inappropriate implementation in this process can be exploited by a remote attacker who crafts a malicious HTML page designed to manipulate the browser's UI rendering. This manipulation enables UI spoofing, where the attacker can present fake or misleading interface elements to the user, potentially tricking them into believing they are interacting with legitimate content or controls. The vulnerability does not require the attacker to have any prior authentication or elevated privileges; however, successful exploitation requires the victim to visit a maliciously crafted webpage. Although the Chromium security team has rated this vulnerability as low severity, the absence of a CVSS score necessitates an independent assessment. The flaw primarily impacts the integrity and authenticity of the user interface, which can facilitate phishing or social engineering attacks by deceiving users. There are no known exploits in the wild, and no official patch links are currently provided, but the vulnerability is publicly disclosed and should be addressed promptly. Given the widespread use of Google Chrome globally and in Europe, this vulnerability poses a risk to a broad user base. The technical details indicate the issue was reserved and published in November 2025, reflecting a recent discovery. The lack of known exploits suggests limited immediate risk but does not preclude future exploitation attempts.

Detailed information about CVE-2025-13107: Inappropriate implementation in Google Chrome affecting Google Chrome. Get real-time updates, technical details, and 

CVE-2025-13107: Inappropriate implementation in Google Chrome - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-13107: Inappropriate implementation in Google Chrome

Inappropriate implementation in Autofill in Google Chrome on Windows prior to 124.0.6367.60 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

CVE-2024-7021 is a vulnerability identified in the Autofill implementation of Google Chrome on Windows platforms prior to version 124.0.6367.60. The issue arises from an inappropriate implementation that allows a remote attacker to craft a malicious HTML page capable of UI spoofing. UI spoofing involves deceiving users by presenting fake interface elements that appear legitimate, potentially tricking users into divulging sensitive information or performing unintended actions. This vulnerability does not involve direct code execution or privilege escalation but undermines the integrity of the browser's user interface, which can be exploited in phishing or social engineering campaigns. The vulnerability is exploitable remotely and requires the victim to visit a maliciously crafted webpage. There is no indication that authentication is required, but user interaction with the page is necessary. Google has acknowledged the issue and released version 124.0.6367.60 to address it, although no public exploits have been reported to date. The absence of a CVSS score suggests the need for an independent severity assessment, which considers the impact on confidentiality and integrity due to potential data disclosure or deception, the ease of exploitation via web content, and the broad user base of Chrome on Windows systems.

Detailed information about CVE-2024-7021: Inappropriate implementation in Google Chrome affecting Google Chrome. Get real-time updates, technical details, and m

Geographic Threat Map

Global Threat Distribution

Threat Levels

Recent Threats

CVE-2025-64444: Improper neutralization of special elements ...

CVE-2025-13161: CWE-23 Relative Path Traversal in IQ Service...

CVE-2025-13160: CWE-497 Exposure of Sensitive System Informa...

CVE-2025-13107: Inappropriate implementation in Google Chrom...

CVE-2024-7021: Inappropriate implementation in Google Chrome

Country Risk Levels

Keyboard Shortcuts

Navigation

Search & Filters

UI Controls

Accessibility