Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Zero Day Initiative

Cisco Talos

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Public-Chat-Room

A vulnerability classified as problematic has been found in code-projects Public Chat Room 1.0. This affects an unknown part of the file /send_message.php. The manipulation of the argument chat_msg/your_name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

CVE-2025-7951 is a cross-site scripting (XSS) vulnerability identified in version 1.0 of the code-projects Public Chat Room application. The vulnerability resides in the /send_message.php endpoint, specifically in the handling of the chat_msg and your_name parameters. An attacker can manipulate these input parameters to inject malicious scripts that execute in the context of other users' browsers when they view the chat messages. This vulnerability is remotely exploitable without authentication, requiring only user interaction to trigger the malicious payload. The vulnerability has been publicly disclosed, increasing the risk of exploitation, although no known active exploits have been reported in the wild to date. The CVSS v4.0 score is 5.1, indicating a medium severity level. The attack vector is network-based with low attack complexity, no privileges required, but user interaction is necessary to activate the malicious script. The impact primarily affects the confidentiality and integrity of user data by potentially stealing session cookies, redirecting users to malicious sites, or performing actions on behalf of the user within the chat application. Availability impact is minimal. Since the vulnerability affects a public-facing chat application, it can be leveraged to target multiple users simultaneously, especially in environments where the application is widely deployed. The lack of a patch or mitigation information in the provided data suggests that organizations using this software need to implement immediate protective measures to reduce risk.

Detailed information about CVE-2025-7951: Cross Site Scripting in code-projects Public Chat Room affecting code-projects Public Chat Room. Get real-time updates

CVE-2025-7951: Cross Site Scripting in code-projects Public Chat Room - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-7951: Cross Site Scripting in code-projects Public Chat Room

A vulnerability was found in code-projects Public Chat Room 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the argument Username leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

CVE-2025-7950 is a SQL Injection vulnerability identified in version 1.0 of the code-projects Public Chat Room application, specifically within the /login.php file. The vulnerability arises from improper sanitization or validation of the 'Username' parameter, which allows an attacker to inject malicious SQL code remotely without requiring any authentication or user interaction. Exploiting this flaw could enable an attacker to manipulate backend database queries, potentially leading to unauthorized data access, data modification, or even complete compromise of the database. The vulnerability has been rated with a CVSS 4.0 base score of 6.9, indicating a medium severity level, primarily due to limited impact on confidentiality, integrity, and availability (all rated low to limited), but with ease of exploitation (network attack vector, no privileges or user interaction required). Although no known exploits are currently observed in the wild, the public disclosure of the vulnerability increases the risk of exploitation. The lack of available patches or mitigation guidance from the vendor further elevates the threat. Given the nature of the affected application—a public chat room—there is a risk that user credentials or chat data stored in the database could be exposed or altered, potentially undermining user privacy and trust. The vulnerability's presence in a web-facing login component makes it a critical entry point for attackers aiming to escalate privileges or pivot within a compromised environment.

Detailed information about CVE-2025-7950: SQL Injection in code-projects Public Chat Room affecting code-projects Public Chat Room. Get real-time updates, techn

CVE-2025-7950: SQL Injection in code-projects Public Chat Room - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-7950: SQL Injection in code-projects Public Chat Room


CVE-2025-7951: Cross Site Scripting in code-projects Public Chat RoomCVE-2025-7951 0 A vulnerability classified as problematic has been found in code-projects Public Chat Room 1.0. This affects an unknown part of the file /send_message.php. The manipulation of the argument chat_msg/your_name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. MediumVulnerabilityGermanyFranceUnited Kingdom+4#cve #cve-2025-7951 Join the discussion	CVE Database V5	07/22/2025, 02:32:05 UTC Added: 07/22/2025, 02:46:06 UTC
CVE-2025-7950: SQL Injection in code-projects Public Chat RoomCVE-2025-7950 0 A vulnerability was found in code-projects Public Chat Room 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the argument Username leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. MediumVulnerabilityGermanyFranceUnited Kingdom+5#cve #cve-2025-7950 Join the discussion	CVE Database V5	07/22/2025, 02:02:05 UTC Added: 07/22/2025, 02:46:06 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional