Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

AlienVault OTX General

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit NetSec

Reddit Cybersecurity

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

myCVE

phpgurukul Nipah virus (NiV) Testing Management System 1.0 contains a SQL injection vulnerability in the /new-user-testing.php file, due to insufficient validation of user input for the " govtissuedid" parameter.

The security threat identified as CVE-2025-51044 pertains to a SQL injection vulnerability in the phpGurukul Nipah virus (NiV) Testing Management System version 1.0. The vulnerability exists specifically in the /new-user-testing.php file, where the "govtissuedid" parameter is not properly validated before being used in SQL queries. This lack of input sanitization allows an attacker to inject malicious SQL code, potentially manipulating the backend database. SQL injection vulnerabilities can lead to unauthorized data access, data modification, or even complete compromise of the database server. In this case, the vulnerable parameter is likely used to identify users or test subjects, which could expose sensitive personal or health-related information if exploited. The absence of a CVSS score and patch links indicates that this vulnerability is newly published and may not yet have an official fix or widespread exploitation. The vulnerability does not require authentication or user interaction to be exploited, increasing its risk profile. However, no known exploits are currently reported in the wild.

Detailed information about CVE-2025-51044: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2025-51044: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-51044: n/a

mycve

A vulnerability was found in PHPGurukul Login and User Management System 3.3. It has been declared as critical. This vulnerability affects unknown code of the file /admin/yesterday-reg-users.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

CVE-2025-8158 is a SQL Injection vulnerability identified in version 3.3 of the PHPGurukul Login and User Management System, specifically in the /admin/yesterday-reg-users.php file. The vulnerability arises from improper sanitization or validation of the 'ID' parameter, which can be manipulated by an attacker to inject malicious SQL queries. This flaw allows remote attackers to execute arbitrary SQL commands on the backend database without requiring user interaction or authentication, as indicated by the CVSS vector (AV:N/AC:L/AT:N/UI:N/PR:L). The vulnerability has been publicly disclosed, which increases the risk of exploitation, although no known exploits are currently observed in the wild. The CVSS 4.0 base score is 5.3, categorizing it as medium severity. The impact on confidentiality, integrity, and availability is limited but present (VC:L/VI:L/VA:L), meaning an attacker could potentially read, modify, or delete some data but not fully compromise the system or cause total denial of service. The vulnerability affects a specific administrative interface, which implies that some level of privilege (low privileges) is required to exploit it, reducing the attack surface somewhat. However, since the attack vector is network-based and does not require user interaction, the vulnerability remains a significant risk for systems running this specific version of the PHPGurukul product. The lack of available patches or mitigations at the time of disclosure further exacerbates the threat.

Detailed information about CVE-2025-8158: SQL Injection in PHPGurukul Login and User Management System affecting PHPGurukul Login and User Management System. Ge

CVE-2025-8158: SQL Injection in PHPGurukul Login and User Management System - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-8158: SQL Injection in PHPGurukul Login and User Management System


CVE-2025-51044: n/aCVE-2025-51044 0 phpgurukul Nipah virus (NiV) Testing Management System 1.0 contains a SQL injection vulnerability in the /new-user-testing.php file, due to insufficient validation of user input for the " govtissuedid" parameter. MediumVulnerabilityGermanyFranceUnited Kingdom+5#cve #cve-2025-51044 Join the discussion	CVE Database V5	07/29/2025, 00:00:00 UTC Added: 07/29/2025, 18:48:14 UTC
CVE-2025-8158: SQL Injection in PHPGurukul Login and User Management SystemCVE-2025-8158 0 A vulnerability was found in PHPGurukul Login and User Management System 3.3. It has been declared as critical. This vulnerability affects unknown code of the file /admin/yesterday-reg-users.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. MediumVulnerabilityGermanyFranceUnited Kingdom+5#cve #cve-2025-8158 Join the discussion	CVE Database V5	07/25/2025, 13:32:06 UTC Added: 07/25/2025, 13:47:46 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional