Reddit NetSec

CVE Database V5

AlienVault OTX General

Reddit InfoSec News

Exploit-DB RSS Feed

ThreatFox MISP Feed

CIRCL OSINT Feed

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Güralp FMUS series seismic monitoring devices expose an unauthenticated Telnet-based command line interface that 
could allow an attacker to modify hardware configurations, manipulate 
data, or factory reset the device.

CVE-2025-8286 is a critical vulnerability affecting all versions of the Güralp FMUS Series seismic monitoring devices. These devices are used for seismic data collection and monitoring, often deployed in geologically sensitive areas to detect and analyze seismic activity. The vulnerability arises from an unauthenticated Telnet-based command line interface exposed by the devices. Telnet, being an unencrypted protocol, combined with the lack of authentication, allows any attacker with network access to the device to connect to the command line interface without credentials. This access enables the attacker to perform several malicious actions, including modifying hardware configurations, manipulating seismic data, or performing a factory reset of the device. The vulnerability is classified under CWE-306 (Missing Authentication for Critical Function), indicating that critical functions are accessible without proper authentication controls. The CVSS v3.1 base score is 9.8, reflecting the high impact on confidentiality, integrity, and availability, ease of exploitation (no authentication or user interaction required), and network attack vector. Although no known exploits have been reported in the wild yet, the severity and simplicity of exploitation make this a significant threat. The lack of available patches at the time of publication further exacerbates the risk. Given the role of these devices in monitoring seismic activity, any compromise could lead to falsified or lost seismic data, potentially impacting early warning systems, scientific research, and infrastructure safety decisions.

Detailed information about CVE-2025-8286: CWE-306 in Güralp Systems Güralp FMUS Series Seismic Monitoring Devices affecting Güralp Systems Güralp FMUS Series Se

CVE-2025-8286: CWE-306 in Güralp Systems Güralp FMUS Series Seismic Monitoring Devices - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-8286: CWE-306 in Güralp Systems Güralp FMUS Series Seismic Monitoring Devices

An issue in Intelbras RX1500 v2.2.9 and RX3000 v1.0.11 allows unauthenticated attackers to execute arbitrary code via injecting a crafted payload into the ESSID name when creating a network.

CVE-2025-26063 is a critical vulnerability affecting Intelbras RX1500 version 2.2.9 and RX3000 version 1.0.11 devices. The flaw allows unauthenticated attackers to execute arbitrary code by injecting a specially crafted payload into the ESSID (Extended Service Set Identifier) name field when creating a wireless network. The ESSID is typically used to identify Wi-Fi networks and is broadcasted by the device. Due to improper input validation or sanitization of the ESSID field, the attacker can embed malicious code that the device processes, leading to arbitrary code execution without requiring authentication or prior access. This vulnerability impacts the device's firmware or software components responsible for handling network creation and ESSID processing. The lack of authentication and the ability to trigger the exploit remotely via wireless network configuration makes this vulnerability particularly dangerous. Although no known exploits have been reported in the wild yet, the potential for exploitation is significant given the attack vector and the critical nature of arbitrary code execution, which could lead to full device compromise, data leakage, or pivoting to internal networks.

Detailed information about CVE-2025-26063: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2025-26063: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-26063: n/a

An access control issue in Intelbras RX1500 v2.2.9 and RX3000 v1.0.11 allows unauthenticated attackers to access the router's settings file and obtain potentially sensitive information from the current settings.

CVE-2025-26062 is a security vulnerability affecting Intelbras RX1500 version 2.2.9 and RX3000 version 1.0.11 routers. The flaw is an access control issue that allows unauthenticated attackers to access the router's settings file. This file likely contains sensitive configuration data such as network settings, passwords, administrative credentials, or other critical operational parameters. Because the vulnerability does not require authentication, any attacker with network access to the device could exploit this flaw to retrieve sensitive information. This exposure could facilitate further attacks, including network intrusion, man-in-the-middle attacks, or persistent compromise of the affected network. The vulnerability has been publicly disclosed but currently lacks a CVSS score and no known exploits have been reported in the wild. The absence of a patch link suggests that a fix may not yet be available, increasing the urgency for affected organizations to implement mitigations. The vulnerability impacts the confidentiality and potentially the integrity of the router’s configuration, posing a significant risk to network security.

Detailed information about CVE-2025-26062: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2025-26062: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-26062: n/a

A vulnerability, which was classified as problematic, has been found in Portabilis i-Educar 2.10. Affected by this issue is some unknown functionality of the file /educar_aluno_lst.php. The manipulation of the argument ref_cod_matricula with the input "><img%20src=x%20onerror=alert(%27CVE-Hunters%27)> leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVE-2025-8346 is a cross-site scripting (XSS) vulnerability identified in version 2.10 of Portabilis i-Educar, an educational management system. The vulnerability exists in the /educar_aluno_lst.php file, specifically in the handling of the 'ref_cod_matricula' parameter. An attacker can inject malicious HTML and JavaScript code by manipulating this parameter, as demonstrated by the payload "><img src=x onerror=alert('CVE-Hunters')>. This type of input is not properly sanitized or encoded, allowing the execution of arbitrary scripts in the context of the victim's browser. The vulnerability is remotely exploitable without requiring authentication or privileges, and user interaction is necessary only to trigger the malicious script (e.g., by visiting a crafted URL). The CVSS 4.0 base score is 5.3, indicating a medium severity level. The attack vector is network-based with low attack complexity and no privileges or user authentication required. The impact primarily affects the integrity and confidentiality of user data by enabling script execution, which could lead to session hijacking, defacement, or phishing attacks. The vendor was notified but did not respond, and no patches have been released yet. Although no known exploits are currently in the wild, the public disclosure of the exploit code increases the risk of exploitation.

Detailed information about CVE-2025-8346: Cross Site Scripting in Portabilis i-Educar affecting Portabilis i-Educar. Get real-time updates, technical details, a

CVE-2025-8346: Cross Site Scripting in Portabilis i-Educar - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-8346: Cross Site Scripting in Portabilis i-Educar

A vulnerability, which was classified as problematic, was found in Portabilis i-Educar 2.9. Affected is an unknown function of the file /intranet/educar_escolaridade_lst.php. The manipulation of the argument descricao leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVE-2025-8370 is a cross-site scripting (XSS) vulnerability identified in Portabilis i-Educar version 2.9, specifically within an unspecified function in the file /intranet/educar_escolaridade_lst.php. The vulnerability arises from improper sanitization or validation of the 'descricao' parameter, which can be manipulated by an attacker to inject malicious scripts. This flaw allows remote attackers to execute arbitrary scripts in the context of the victim's browser when they access a crafted URL or input containing the malicious payload. The vulnerability is classified as 'problematic' with a CVSS 4.0 base score of 5.3, indicating a medium severity level. The vector metrics indicate that the attack can be performed remotely (AV:N), requires no privileges (PR:N), and no user authentication (AT:N), but does require user interaction (UI:P), such as clicking a malicious link or visiting a compromised page. The impact primarily affects the confidentiality and integrity of user data by potentially stealing session cookies, redirecting users, or performing actions on behalf of the user. The vendor was notified early but has not responded or issued a patch, and no known exploits are currently reported in the wild. The vulnerability disclosure is public, which increases the risk of exploitation by opportunistic attackers. Given the nature of i-Educar as an education management system, the vulnerability could affect educational institutions relying on this software for intranet or administrative functions.

Detailed information about CVE-2025-8370: Cross Site Scripting in Portabilis i-Educar affecting Portabilis i-Educar. Get real-time updates, technical details, a

CVE-2025-8370: Cross Site Scripting in Portabilis i-Educar - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-8370: Cross Site Scripting in Portabilis i-Educar

A vulnerability, which was classified as problematic, has been found in Portabilis i-Educar 2.9. This issue affects some unknown processing of the file /intranet/educar_avaliacao_desempenho_lst.php. The manipulation of the argument titulo_avaliacao leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVE-2025-8369 is a cross-site scripting (XSS) vulnerability identified in Portabilis i-Educar version 2.9, specifically affecting the file /intranet/educar_avaliacao_desempenho_lst.php. The vulnerability arises from improper handling of the 'titulo_avaliacao' parameter, which allows an attacker to inject malicious scripts that execute in the context of the victim's browser. This vulnerability is remotely exploitable without requiring authentication, and user interaction is necessary to trigger the attack (e.g., by visiting a crafted URL). The CVSS 4.0 base score is 5.3, indicating a medium severity level. The attack vector is network-based with low attack complexity, no privileges required, and no user authentication needed, but user interaction is required. The impact primarily affects the integrity of the victim's browsing session, with limited impact on confidentiality and availability. The vendor was notified early but has not responded or provided a patch, and no official fixes are currently available. Although no known exploits are reported in the wild, the public disclosure of the vulnerability and exploit code increases the risk of exploitation. The vulnerability could be leveraged to perform session hijacking, defacement, or phishing attacks within the i-Educar intranet environment, potentially compromising user trust and data integrity within educational institutions using this platform.

Detailed information about CVE-2025-8369: Cross Site Scripting in Portabilis i-Educar affecting Portabilis i-Educar. Get real-time updates, technical details, a

CVE-2025-8369: Cross Site Scripting in Portabilis i-Educar - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-8369: Cross Site Scripting in Portabilis i-Educar

A vulnerability classified as problematic was found in Portabilis i-Educar 2.9. This vulnerability affects unknown code of the file /intranet/pesquisa_pessoa_lst.php. The manipulation of the argument campo_busca/cpf leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVE-2025-8368 is a cross-site scripting (XSS) vulnerability identified in Portabilis i-Educar version 2.9, specifically within the /intranet/pesquisa_pessoa_lst.php file. The vulnerability arises from improper sanitization or validation of user-supplied input in the 'campo_busca' or 'cpf' parameters, which allows an attacker to inject malicious scripts. This vulnerability is exploitable remotely without requiring authentication, and user interaction is needed to trigger the malicious payload, typically by tricking a user into clicking a crafted link or visiting a malicious page. The CVSS 4.0 base score is 5.3, indicating a medium severity level. The attack vector is network-based (AV:N), with low attack complexity (AC:L), no privileges required (PR:N), and no user authentication needed (AT:N). However, user interaction (UI:P) is necessary to execute the attack. The vulnerability impacts the confidentiality and integrity of the affected system by potentially allowing attackers to execute arbitrary scripts in the context of the victim's browser session, leading to session hijacking, credential theft, or unauthorized actions on behalf of the user. The vendor was notified but has not responded or released a patch, and no official remediation is currently available. Although no known exploits are reported in the wild, the public disclosure of the exploit code increases the risk of exploitation.

Detailed information about CVE-2025-8368: Cross Site Scripting in Portabilis i-Educar affecting Portabilis i-Educar. Get real-time updates, technical details, a

CVE-2025-8368: Cross Site Scripting in Portabilis i-Educar - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-8368: Cross Site Scripting in Portabilis i-Educar

A vulnerability classified as problematic has been found in Portabilis i-Educar 2.9. This affects an unknown part of the file /intranet/funcionario_vinculo_lst.php. The manipulation of the argument nome leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVE-2025-8367 is a cross-site scripting (XSS) vulnerability identified in version 2.9 of Portabilis i-Educar, an educational management system. The vulnerability exists in the /intranet/funcionario_vinculo_lst.php file, specifically through improper handling of the 'nome' parameter. This flaw allows an attacker to inject malicious scripts that execute in the context of a victim's browser when they access a crafted URL or input. The vulnerability is remotely exploitable without requiring authentication, and user interaction is needed to trigger the malicious payload, such as clicking a malicious link or visiting a compromised page. The CVSS 4.0 base score is 5.3 (medium severity), reflecting network attack vector, low attack complexity, no privileges required, and user interaction needed. The impact primarily affects confidentiality and integrity, with limited impact on availability. The vendor has been contacted but has not responded or issued a patch, and no known exploits are currently in the wild. Given the public disclosure, the risk of exploitation may increase over time. XSS vulnerabilities can be leveraged for session hijacking, credential theft, or delivering further malware, especially in web applications handling sensitive user data like educational records.

Detailed information about CVE-2025-8367: Cross Site Scripting in Portabilis i-Educar affecting Portabilis i-Educar. Get real-time updates, technical details, a

CVE-2025-8367: Cross Site Scripting in Portabilis i-Educar - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-8367: Cross Site Scripting in Portabilis i-Educar

A vulnerability was found in Portabilis i-Educar 2.9. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /intranet/educar_servidor_lst.php. The manipulation of the argument nome/matricula_servidor leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVE-2025-8366 is a cross-site scripting (XSS) vulnerability identified in version 2.9 of Portabilis i-Educar, an educational management system. The vulnerability resides in the /intranet/educar_servidor_lst.php file, specifically involving the manipulation of the 'nome' and 'matricula_servidor' parameters. An attacker can craft malicious input to these parameters, which is then improperly sanitized or encoded by the application, allowing the injection and execution of arbitrary JavaScript code in the context of the victim's browser. This vulnerability is remotely exploitable without requiring authentication or prior privileges, and user interaction is necessary to trigger the malicious script, typically by visiting a crafted URL or interacting with a compromised page. The CVSS 4.0 base score is 5.3, reflecting a medium severity rating. The vulnerability does not impact confidentiality or availability directly but poses a risk to integrity and user trust by enabling session hijacking, credential theft, or other malicious actions through script execution. The vendor was notified but has not responded or issued a patch, and while no known exploits are currently active in the wild, public disclosure of the exploit code increases the risk of exploitation. The vulnerability affects a specific version (2.9) of i-Educar, which is a platform used primarily in educational institutions for managing administrative and academic processes.

Detailed information about CVE-2025-8366: Cross Site Scripting in Portabilis i-Educar affecting Portabilis i-Educar. Get real-time updates, technical details, a

CVE-2025-8366: Cross Site Scripting in Portabilis i-Educar - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-8366: Cross Site Scripting in Portabilis i-Educar

A vulnerability was found in Portabilis i-Educar 2.10. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file atendidos_cad.php. The manipulation of the argument nome/nome_social/email leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVE-2025-8365 is a cross-site scripting (XSS) vulnerability identified in version 2.10 of Portabilis i-Educar, an educational management system. The vulnerability resides in an unspecified functionality within the atendidos_cad.php file, where the manipulation of input parameters such as nome, nome_social, or email can lead to the injection of malicious scripts. This flaw allows an attacker to craft specially crafted requests that, when processed by the vulnerable application, execute arbitrary JavaScript code in the context of the victim's browser. The attack can be launched remotely without requiring prior authentication, although it does require some user interaction (e.g., the victim visiting a malicious link or page). The vulnerability has a CVSS 4.0 base score of 5.1, indicating a medium severity level. The vector details show that the attack is network-based (AV:N), requires low attack complexity (AC:L), no privileges (PR:L) but does require user interaction (UI:P). The impact primarily affects the integrity and confidentiality of user data by enabling script execution that could steal session tokens, perform actions on behalf of users, or redirect users to malicious sites. The vendor was notified early but has not responded or issued a patch, and although no known exploits are currently in the wild, public disclosure of the exploit code increases the risk of exploitation.

Detailed information about CVE-2025-8365: Cross Site Scripting in Portabilis i-Educar affecting Portabilis i-Educar. Get real-time updates, technical details, a

Title	Severity	Type	Source	Date

Threats Affecting Portugal

Filter Threats

Threats Affecting Portugal

Keyboard Shortcuts

Navigation

Search & Filters

UI Controls

Accessibility