Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Microsoft Security Blog

Google Project Zero

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Novel-System

A security vulnerability has been detected in 08CMS Novel System up to 3.4. This issue affects some unknown processing of the file admina/mtpls.inc.php of the component Template Handler. The manipulation leads to code injection. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used.

CVE-2025-15250 is a code injection vulnerability identified in the 08CMS Novel System, versions 3.0 through 3.4. The vulnerability resides in the Template Handler component, specifically within the file admina/mtpls.inc.php. The issue arises from improper handling of input data, which allows an attacker to inject and execute arbitrary code remotely. The attack vector is network-based (AV:N), with low attack complexity (AC:L), and does not require user interaction (UI:N). However, it requires the attacker to have high privileges (PR:H), indicating that the attacker must already have elevated access, such as an administrator or a user with significant rights on the system. The vulnerability impacts confidentiality, integrity, and availability at a low level (VC:L, VI:L, VA:L), meaning the attacker can potentially access sensitive data, modify system behavior, or disrupt services, but with limited scope or impact. The vulnerability does not affect system components (SC:N), nor does it involve scope or security impact changes (SI:N, SA:N). The exploit has been publicly disclosed, increasing the risk of exploitation, although no active exploitation in the wild has been reported to date. The lack of patches or official remediation links suggests that organizations must rely on configuration changes or vendor updates once available. This vulnerability is particularly concerning for organizations that use 08CMS Novel System for managing digital content, as code injection can lead to full system compromise if exploited successfully. The requirement for high privileges limits the attack surface but does not eliminate the risk, especially in environments where administrative access is not tightly controlled.

Detailed information about CVE-2025-15250: Code Injection in 08CMS Novel System affecting 08CMS Novel System. Get real-time updates, technical details, and miti

CVE-2025-15250: Code Injection in 08CMS Novel System - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-15250: Code Injection in 08CMS Novel System

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional