Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

GCP Compute Engine Security

JVN Japan

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Kalmia

Kalmia CMS version 0.2.0 contains an Incorrect Access Control vulnerability in the /kal-api/auth/users API endpoint. Due to insufficient permission validation and excessive data exposure in the backend, an authenticated user with basic read permissions can retrieve sensitive information for all platform users.

CVE-2025-65900 identifies a security vulnerability in Kalmia CMS version 0.2.0, specifically an Incorrect Access Control issue in the /kal-api/auth/users API endpoint. The vulnerability arises because the backend fails to properly validate permissions, allowing an authenticated user with only basic read privileges to access sensitive information about all users on the platform. This excessive data exposure violates the principle of least privilege and can lead to unauthorized disclosure of personal or sensitive user data. The vulnerability is classified under CWE-863 (Incorrect Authorization). The CVSS v3.1 base score is 6.5, indicating a medium severity, with the vector AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N, meaning it is remotely exploitable over the network, requires low attack complexity, requires privileges (authenticated user with read access), no user interaction, unchanged scope, high confidentiality impact, and no impact on integrity or availability. No patches or known exploits are currently available, but the vulnerability poses a significant risk to confidentiality. Organizations using this CMS version should be aware that attackers with basic authenticated access can harvest sensitive user data, potentially leading to privacy violations, compliance issues, and further targeted attacks.

Detailed information about CVE-2025-65900: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2025-65900: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-65900: n/a

Kalmia CMS version 0.2.0 contains a user enumeration vulnerability in its authentication mechanism. The application returns different error messages for invalid users (user_not_found) versus valid users with incorrect passwords (invalid_password). This observable response discrepancy allows unauthenticated attackers to enumerate valid usernames on the system.

CVE-2025-65899 identifies a user enumeration vulnerability in the authentication mechanism of Kalmia CMS version 0.2.0. The core issue arises because the system returns different error messages depending on whether the username is invalid (user_not_found) or the password is incorrect (invalid_password). This behavior allows an unauthenticated attacker to distinguish valid usernames from invalid ones by observing the system's responses during login attempts. User enumeration vulnerabilities fall under CWE-204 and are significant because they can provide attackers with a list of valid usernames, which can then be used to launch more focused attacks such as password guessing, credential stuffing, or social engineering. The vulnerability has a CVSS v3.1 base score of 5.3, indicating medium severity. The vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N shows that the attack can be performed remotely over the network without privileges or user interaction, and it impacts confidentiality to a limited extent by revealing valid usernames. There is no impact on integrity or availability. No patches or fixes are currently linked, and no known exploits have been reported in the wild as of the publication date (December 4, 2025). The vulnerability is particularly relevant for organizations that rely on Kalmia CMS for web content management and have public-facing login portals, as attackers can leverage this flaw to gather intelligence on valid user accounts.

Detailed information about CVE-2025-65899: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2025-65899: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-65899: n/a


CVE-2025-65900: n/aCVE-2025-65900 0 Kalmia CMS version 0.2.0 contains an Incorrect Access Control vulnerability in the /kal-api/auth/users API endpoint. Due to insufficient permission validation and excessive data exposure in the backend, an authenticated user with basic read permissions can retrieve sensitive information for all platform users. MediumVulnerabilityGermanyFranceUnited Kingdom+7#cve #cve-2025-65900 Join the discussion	CVE Database V5	12/04/2025, 00:00:00 UTC Added: 12/04/2025, 21:23:54 UTC
CVE-2025-65899: n/aCVE-2025-65899 0 Kalmia CMS version 0.2.0 contains a user enumeration vulnerability in its authentication mechanism. The application returns different error messages for invalid users (user_not_found) versus valid users with incorrect passwords (invalid_password). This observable response discrepancy allows unauthenticated attackers to enumerate valid usernames on the system. MediumVulnerabilityGermanyFranceUnited Kingdom+4#cve #cve-2025-65899 Join the discussion	CVE Database V5	12/04/2025, 00:00:00 UTC Added: 12/04/2025, 21:23:54 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional