Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

teedy

A vulnerability was determined in Sismics Teedy up to 1.11. This affects an unknown function of the file /api/file of the component API Endpoint. Executing a manipulation can lead to improper access controls. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.

CVE-2025-11853 is a vulnerability identified in the Sismics Teedy document management system, specifically affecting all versions up to 1.11. The flaw resides in the /api/file endpoint of the API component, where improper access control mechanisms allow remote attackers to bypass intended restrictions. This vulnerability does not require authentication or user interaction, making it easier to exploit remotely. Attackers can manipulate API requests to gain unauthorized access to files or data managed by Teedy, potentially leading to data leakage or unauthorized data modification. The vulnerability has been publicly disclosed, increasing the risk of exploitation, but no patches or vendor responses have been provided as of the publication date. The CVSS 4.0 vector indicates network attack vector (AV:N), low attack complexity (AC:L), no privileges required (PR:L - low privileges), no user interaction (UI:N), and impacts on confidentiality, integrity, and availability at low levels (VC:L, VI:L, VA:L). The lack of vendor remediation and public exploit details necessitate immediate attention from users of this software. The vulnerability's scope is limited to Teedy installations, but given Teedy's use in document management, the impact on confidentiality and integrity of sensitive documents can be significant.

Detailed information about CVE-2025-11853: Improper Access Controls in Sismics Teedy affecting Sismics Teedy. Get real-time updates, technical details, and miti

CVE-2025-11853: Improper Access Controls in Sismics Teedy - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-11853: Improper Access Controls in Sismics Teedy

Teedy 1.11 is vulnerable to Cross Site Scripting (XSS) via the management console.

CVE-2024-46278 identifies a Cross Site Scripting (XSS) vulnerability in Teedy version 1.11, specifically within its management console interface. XSS vulnerabilities arise when an application does not properly sanitize user-supplied input, allowing attackers to inject malicious scripts that execute in the context of a victim's browser session. In this case, the vulnerability requires an attacker to have high privileges (PR:H) and some user interaction (UI:R), indicating that exploitation is possible by authenticated users with elevated rights interacting with the management console. The vulnerability has a network attack vector (AV:N), meaning it can be exploited remotely over the network. The vulnerability impacts confidentiality, integrity, and availability (C:H/I:H/A:H), suggesting that successful exploitation could lead to data theft, unauthorized modifications, and disruption of service. The scope is changed (S:C), indicating that the vulnerability affects resources beyond the initially vulnerable component, potentially compromising the entire application or system. Although no patches or known exploits are currently available, the presence of this vulnerability in a critical administrative interface makes it a significant risk. The vulnerability is categorized under CWE-79, which is a common and well-understood class of security flaws related to improper input validation and output encoding. Organizations using Teedy 1.11 should be aware of this vulnerability and monitor for updates or patches from the vendor or community.

Detailed information about CVE-2024-46278: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-46278: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-46278: n/a


CVE-2025-11853: Improper Access Controls in Sismics TeedyCVE-2025-11853 0 A vulnerability was determined in Sismics Teedy up to 1.11. This affects an unknown function of the file /api/file of the component API Endpoint. Executing a manipulation can lead to improper access controls. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way. MediumVulnerabilityUnited StatesGermanyFrance+7#cve #cve-2025-11853 Join the discussion	CVE Database V5	10/16/2025, 19:02:07 UTC Added: 10/16/2025, 19:14:04 UTC
CVE-2024-46278: n/aCVE-2024-46278 0 Teedy 1.11 is vulnerable to Cross Site Scripting (XSS) via the management console. HighVulnerabilityUnited StatesGermanyFrance+7#cve #cve-2024-46278 Join the discussion	CVE Database V5	10/07/2024, 00:00:00 UTC Added: 02/25/2026, 21:43:22 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional