Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

revive-adserver

HackerOne community member Faraz Ahmed (PakCyberbot) has reported a format string injection in the Revive Adserver settings. When specific character combinations are used in a setting, the admin user console could be disabled due to a fatal PHP error.

CVE-2026-21640 is a format string injection vulnerability identified in Revive Adserver version 6, a popular open-source ad serving platform. The vulnerability arises when specific character combinations are entered into configuration settings, triggering a fatal PHP error that disables the administrative user console. This effectively results in a denial of service (DoS) condition for administrators, preventing them from managing ad campaigns or configurations. The flaw requires the attacker to have administrative privileges to exploit it, as it involves modifying settings accessible only to admins. The vulnerability does not compromise confidentiality or integrity of data but impacts availability by crashing the admin interface. The CVSS 3.0 score is 2.7, reflecting low severity due to the need for high privileges and lack of data breach potential. No public exploits are known at this time, and no patches have been explicitly linked in the provided data. The issue was responsibly disclosed by a HackerOne community member and is now published in the CVE database. Organizations running Revive Adserver version 6 should be aware of this vulnerability as it can disrupt ad management operations if exploited.

Detailed information about CVE-2026-21640: Vulnerability in Revive Revive Adserver affecting Revive Revive Adserver. Get real-time updates, technical details, a

CVE-2026-21640: Vulnerability in Revive Revive Adserver - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-21640: Vulnerability in Revive Revive Adserver

Improper neutralisation of format characters in the settings of Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes an administrator user to disable the admin user console due to a fatal PHP error.

CVE-2025-52666 is a vulnerability identified in Revive Adserver, an open-source ad serving platform widely used for managing and delivering online advertisements. The flaw exists in versions 5.5.2, 6.0.1, and earlier, where improper neutralization of format characters in the application settings leads to a fatal PHP error. Specifically, this is a CWE-134 (Use of Externally-Controlled Format String) vulnerability, where format strings are not properly sanitized before being processed. When an administrator user inputs malicious format characters into the settings, it triggers a fatal error that disables the admin user console, effectively locking out administrators from managing the ad server. The vulnerability requires administrator-level privileges to exploit, meaning an attacker must already have high-level access to the system. No user interaction is required beyond the attacker’s own actions. The impact is limited to availability, as the error prevents access to the administrative interface but does not compromise data confidentiality or integrity. The CVSS v3.0 score is 2.7, reflecting low severity due to the need for high privileges and limited impact scope. No public exploits have been reported, and no patches were linked at the time of publication, indicating that remediation may rely on vendor updates or configuration changes.

Detailed information about CVE-2025-52666: Vulnerability in Revive Revive Adserver affecting Revive Revive Adserver. Get real-time updates, technical details, a

CVE-2025-52666: Vulnerability in Revive Revive Adserver - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-52666: Vulnerability in Revive Revive Adserver


CVE-2026-21640: Vulnerability in Revive Revive AdserverCVE-2026-21640 0 HackerOne community member Faraz Ahmed (PakCyberbot) has reported a format string injection in the Revive Adserver settings. When specific character combinations are used in a setting, the admin user console could be disabled due to a fatal PHP error. LowVulnerabilityGermanyUnited KingdomFrance+4#cve #cve-2026-21640 Join the discussion	CVE Database V5	01/20/2026, 20:48:47 UTC Added: 01/20/2026, 21:05:56 UTC
CVE-2025-52666: Vulnerability in Revive Revive AdserverCVE-2025-52666 0 Improper neutralisation of format characters in the settings of Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes an administrator user to disable the admin user console due to a fatal PHP error. LowVulnerabilityGermanyUnited KingdomFrance+3#cve #cve-2025-52666 Join the discussion	CVE Database V5	11/20/2025, 19:10:15 UTC Added: 11/20/2025, 19:33:26 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional