Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit NetSec

Reddit Cybersecurity

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

AWS Security Bulletins

GCP Kubernetes Security

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

quartus-prime-pro

Insecure Temporary File vulnerability in Altera Quartus Prime Pro 

Installer (SFX)

 on Windows allows : Use of Predictable File Names.This issue affects Quartus Prime Pro: from 24.1 through 25.1.1.

CVE-2025-14612 identifies a security vulnerability classified under CWE-377 (Insecure Temporary File) in the Altera Quartus Prime Pro software installer for Windows platforms. The vulnerability stems from the use of predictable file names for temporary files during the installation process, which can be exploited by local attackers with limited privileges. Specifically, the installer creates temporary files with names that can be anticipated by an attacker, allowing them to perform race conditions or symbolic link (symlink) attacks to replace or manipulate these files. This can lead to unauthorized access, modification, or disclosure of sensitive installation data or potentially escalate privileges if the installer runs with elevated rights. The affected versions include Quartus Prime Pro from 24.1 through 25.1.1. The CVSS 4.0 base score is 5.4 (medium severity), reflecting that exploitation requires local access, user interaction, and privileges but can impact confidentiality, integrity, and availability to a high degree. No public exploits are known at this time, and no patches have been released yet. The vulnerability is particularly relevant in environments where multiple users share systems or where attackers have limited local access but can trick users into running the installer. The insecure temporary file handling is a common vector for privilege escalation or data tampering attacks, emphasizing the need for secure file handling practices in software installers.

Detailed information about CVE-2025-14612: CWE-377: Insecure Temporary File in Altera Quartus Prime Pro affecting Altera Quartus Prime Pro. Get real-time update

CVE-2025-14612: CWE-377: Insecure Temporary File in Altera Quartus Prime Pro - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-14612: CWE-377: Insecure Temporary File in Altera Quartus Prime Pro

Uncontrolled Search Path Element vulnerability in Altera Quartus Prime Pro 

Installer (SFX) 

on Windows allows Search Order Hijacking.This issue affects Quartus Prime Pro: from 24.1 through 24.3.1.

CVE-2025-14596 identifies a vulnerability categorized under CWE-427 (Uncontrolled Search Path Element) in the Altera Quartus Prime Pro Installer for Windows platforms, specifically affecting versions from 23.3 through 24.3.1. The vulnerability arises because the installer does not securely control the search path used to locate DLLs or executables during installation, allowing an attacker with local access to place malicious files in directories that are searched before the legitimate ones. This search order hijacking can lead to execution of attacker-controlled code with the privileges of the installer process, which typically runs with limited user rights. The vulnerability requires local access and user interaction, as the user must run the installer or a related process. The CVSS 4.0 vector indicates a local attack vector (AV:L), high attack complexity (AC:H), partial privileges required (PR:L), and user interaction (UI:A). The impact on confidentiality, integrity, and availability is high if exploitation succeeds, but the scope is limited to the local system. No patches or exploits are currently reported, but the vulnerability is publicly disclosed and should be addressed promptly. This vulnerability is particularly relevant for organizations using Quartus Prime Pro for FPGA design and development, as successful exploitation could compromise development environments or lead to supply chain risks if compromised installers are distributed internally.

Detailed information about CVE-2025-14596: CWE-427 Uncontrolled Search Path Element in Altera Quartus Prime Pro affecting Altera Quartus Prime Pro. Get real-tim

CVE-2025-14596: CWE-427 Uncontrolled Search Path Element in Altera Quartus Prime Pro - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-14596: CWE-427 Uncontrolled Search Path Element in Altera Quartus Prime Pro

Under certain circumstances, the Quartus Prime Pro Installer for Windows does not check the permissions of the Quartus target installation directory if the target installation directory already exists.

CVE-2025-13663 is a vulnerability classified under CWE-279 (Incorrect Execution-Assigned Permissions) affecting the Altera Quartus Prime Pro software, specifically version 17.0 on Windows platforms. The issue arises because the Quartus Prime Pro Installer does not properly check the permissions of the target installation directory if that directory already exists prior to installation. This flaw can be exploited by a local user with low privileges who can manipulate the existing directory permissions or contents to execute arbitrary code with elevated privileges during the installation process. The vulnerability has a CVSS v3.1 base score of 6.7, indicating medium severity, with the vector AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H. This means the attack requires local access, high attack complexity, low privileges, and user interaction, but can result in high impact on confidentiality, integrity, and availability. The scope remains unchanged, affecting only the local system. No patches or known exploits are currently available, but the risk lies in potential privilege escalation and unauthorized code execution during installation. This vulnerability is particularly relevant for environments where Quartus Prime Pro is used for FPGA design and development, often in critical industrial and manufacturing contexts.

Detailed information about CVE-2025-13663: CWE-279: Incorrect Execution-Assigned Permissions in Altera Quartus Prime Pro affecting Altera Quartus Prime Pro. Get


CVE-2025-14612: CWE-377: Insecure Temporary File in Altera Quartus Prime ProCVE-2025-14612 0 Insecure Temporary File vulnerability in Altera Quartus Prime Pro Installer (SFX) on Windows allows : Use of Predictable File Names.This issue affects Quartus Prime Pro: from 24.1 through 25.1.1. MediumVulnerabilityGermanyFranceNetherlands+2#cve #cve-2025-14612 #cwe-377 Join the discussion	CVE Database V5	01/06/2026, 21:24:33 UTC Added: 01/06/2026, 21:41:27 UTC
CVE-2025-14596: CWE-427 Uncontrolled Search Path Element in Altera Quartus Prime ProCVE-2025-14596 0 Uncontrolled Search Path Element vulnerability in Altera Quartus Prime Pro Installer (SFX) on Windows allows Search Order Hijacking.This issue affects Quartus Prime Pro: from 24.1 through 24.3.1. MediumVulnerabilityGermanyFranceNetherlands+3#cve #cve-2025-14596 #cwe-427 Join the discussion	CVE Database V5	01/06/2026, 21:06:19 UTC Added: 01/06/2026, 21:26:28 UTC
CVE-2025-13663: CWE-279: Incorrect Execution-Assigned Permissions in Altera Quartus Prime ProCVE-2025-13663 0 Under certain circumstances, the Quartus Prime Pro Installer for Windows does not check the permissions of the Quartus target installation directory if the target installation directory already exists. MediumVulnerabilityGermanyNetherlandsFrance+3#cve #cve-2025-13663 #cwe-279 Join the discussion	CVE Database V5	12/11/2025, 20:35:24 UTC Added: 12/11/2025, 20:56:02 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional