Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

CVE Database V5

GCVE Database

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Malware

Reddit Reverse Engineering

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

vuln

A flaw has been found in itsourcecode Sales and Inventory System 1.0. The impacted element is the function mysqli_query of the file /pages/us_searchfrm.php. Executing a manipulation of the argument ID can lead to sql injection. It is possible to launch the attack remotely. The exploit has been published and may be used.

The vulnerability CVE-2026-86517 affects itsourcecode Sales and Inventory System version 1.0. It is caused by improper sanitization of the ID parameter in the mysqli_query function in /pages/us_searchfrm.php, allowing an attacker to perform SQL injection remotely. Exploit code has been published, increasing the risk of exploitation. There is no vendor advisory or patch available at this time.

Detailed information about CVE-2026-86517: SQL Injection in itsourcecode Sales and Inventory System affecting itsourcecode Sales and Inventory System. Get real-

CVE-2026-86517: SQL Injection in itsourcecode Sales and Inventory System - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-86517: SQL Injection in itsourcecode Sales and Inventory System

A flaw has been found in campcodes Online Student Enrollment System 1.0. This impacts an unknown function of the file /admin/register.php. Executing a manipulation of the argument photo can lead to unrestricted upload. The attack can be launched remotely. The exploit has been published and may be used.

CVE-2025-14583 identifies a vulnerability in campcodes Online Student Enrollment System version 1.0, specifically in the /admin/register.php file. The flaw is an unrestricted file upload vulnerability triggered by manipulation of the 'photo' parameter. This vulnerability allows remote attackers to upload arbitrary files without requiring authentication or user interaction, due to insufficient validation or sanitization of the uploaded content. The unrestricted upload capability can be exploited to upload malicious files such as web shells or scripts, potentially leading to remote code execution, data leakage, or system compromise. The CVSS 4.0 vector indicates no privileges required (PR:N), no user interaction (UI:N), and network attack vector (AV:N), with low impact on confidentiality, integrity, and availability individually but combined to a medium overall severity (6.9). The vulnerability is present only in version 1.0 of the product, and no official patches or mitigations have been published yet. Although no active exploitation has been reported, the availability of exploit code increases the likelihood of attacks. The vulnerability affects a critical function related to student enrollment administration, making it a significant risk for educational institutions using this system. The lack of scope change (S:N) means the impact is limited to the vulnerable component but can still lead to significant damage if exploited.

Detailed information about CVE-2025-14583: Unrestricted Upload in campcodes Online Student Enrollment System affecting campcodes Online Student Enrollment Syste

CVE-2025-14583: Unrestricted Upload in campcodes Online Student Enrollment System - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-14583: Unrestricted Upload in campcodes Online Student Enrollment System


CVE-2026-86517: SQL Injection in itsourcecode Sales and Inventory SystemCVE-2026-86517 0 A flaw has been found in itsourcecode Sales and Inventory System 1.0. The impacted element is the function mysqli_query of the file /pages/us_searchfrm.php. Executing a manipulation of the argument ID can lead to sql injection. It is possible to launch the attack remotely. The exploit has been published and may be used. MediumVulnerability#cve #cve-2026-86517 Join the discussion	CVE Database V5	09/08/2026, 03:30:08 UTC Added: 09/08/2026, 03:37:41 UTC
CVE-2025-14583: Unrestricted Upload in campcodes Online Student Enrollment SystemCVE-2025-14583 0 A flaw has been found in campcodes Online Student Enrollment System 1.0. This impacts an unknown function of the file /admin/register.php. Executing a manipulation of the argument photo can lead to unrestricted upload. The attack can be launched remotely. The exploit has been published and may be used. MediumVulnerabilityUnited StatesIndiaUnited Kingdom+7#cve #cve-2025-14583 Join the discussion	CVE Database V5	12/12/2025, 22:02:09 UTC Added: 12/12/2025, 22:22:02 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional