Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

AlienVault OTX General

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

GCP Compute Engine Security

JVN Japan

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

ModernShop

A flaw has been found in abhicodebox ModernShop 20250922. This issue affects some unknown processing of the file /search. Executing manipulation of the argument q can lead to cross site scripting. The attack may be performed from remote. The exploit has been published and may be used.

CVE-2025-12267 is a cross-site scripting (XSS) vulnerability identified in the abhicodebox ModernShop e-commerce platform, specifically version 20250922. The vulnerability arises from improper sanitization or encoding of user-supplied input in the 'q' parameter of the /search endpoint. An attacker can craft a malicious URL containing a payload in the 'q' parameter that, when visited by a user, causes the victim's browser to execute arbitrary JavaScript code. This type of reflected XSS attack can be launched remotely without any authentication or privileges, relying solely on user interaction to trigger the payload. The CVSS 4.0 vector indicates no privileges required (PR:N), no user interaction required (UI:P), and no impact on confidentiality (VC:N) or availability (VA:N), but low impact on integrity (VI:L). The vulnerability can be exploited to steal session cookies, perform actions on behalf of the user, or redirect users to malicious websites, potentially leading to account compromise or phishing attacks. Although no active exploitation in the wild has been reported, the availability of a public exploit increases the risk of imminent attacks. The lack of official patches or vendor advisories at this time necessitates immediate attention from administrators. The vulnerability affects only the specified version 20250922 of ModernShop, so organizations running this version are at risk. The attack surface is the public-facing search functionality, which is commonly accessible and frequently used, increasing exposure. The flaw highlights the importance of proper input validation and output encoding in web applications to prevent injection-based attacks.

Detailed information about CVE-2025-12267: Cross Site Scripting in abhicodebox ModernShop affecting abhicodebox ModernShop. Get real-time updates, technical det

CVE-2025-12267: Cross Site Scripting in abhicodebox ModernShop - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-12267: Cross Site Scripting in abhicodebox ModernShop

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional