Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

easyflow-gp

EasyFlow GP developed by Digiwin has a Denial of service vulnerability, allowing unauthenticated remote attackers to send specific requests that result in denial of web service.

CVE-2025-13165 identifies a denial of service (DoS) vulnerability in Digiwin's EasyFlow GP product, specifically in versions 5.7.x, 5.8.8.3, and 8.1.x. The root cause is an allocation of resources without proper limits or throttling, classified under CWE-770. This flaw allows unauthenticated remote attackers to send specially crafted requests that cause the application to consume excessive resources, leading to a denial of web service. The vulnerability does not require any authentication or user interaction, making it easily exploitable remotely. The CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N) reflects a network attack vector with low complexity, no privileges or user interaction needed, and a high impact on availability. Although no public exploits have been reported, the high CVSS score (8.7) indicates a critical risk to service continuity. Digiwin EasyFlow GP is used in enterprise environments for workflow and process automation, so disruption could impact business operations. The lack of patch links suggests that a fix may not yet be available, emphasizing the need for interim mitigations. The vulnerability's technical details confirm it was reserved and published in November 2025 by TW-CERT, indicating credible and verified reporting.

Detailed information about CVE-2025-13165: CWE-770 Allocation of Resources Without Limits or Throttling in Digiwin EasyFlow GP affecting Digiwin EasyFlow GP. Ge

CVE-2025-13165: CWE-770 Allocation of Resources Without Limits or Throttling in Digiwin EasyFlow GP - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-13165: CWE-770 Allocation of Resources Without Limits or Throttling in Digiwin EasyFlow GP

EasyFlow GP developed by Digiwin has an Insufficiently Protected Credentials vulnerability, allowing privileged remote attackers to obtain plaintext credentials of AD and system mail from the system frontend.

CVE-2025-13164 identifies a vulnerability in Digiwin EasyFlow GP version 5.8.8.3, where credentials for Active Directory (AD) and system mail accounts are insufficiently protected, allowing privileged remote attackers to retrieve them in plaintext from the system frontend. This vulnerability is categorized under CWE-522, which concerns the inadequate protection of credentials in storage or transit. The flaw enables attackers with privileged network access to extract sensitive authentication data without requiring user interaction or additional authentication steps. The CVSS 4.0 vector (AV:N/AC:L/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N) indicates that the attack is network-based with low complexity, no user interaction, but requires high privileges. The impact is primarily on confidentiality, as attackers can obtain plaintext credentials that could be used for further lateral movement or privilege escalation within an enterprise environment. No patches are currently linked, and no known exploits are reported in the wild, but the exposure of plaintext credentials represents a significant risk if exploited. Digiwin EasyFlow GP is an enterprise workflow and process management product, often integrated with AD and mail systems, making the protection of these credentials critical to maintaining overall system security.

Detailed information about CVE-2025-13164: CWE-522 Insufficiently Protected Credentials in Digiwin EasyFlow GP affecting Digiwin EasyFlow GP. Get real-time upda

CVE-2025-13164: CWE-522 Insufficiently Protected Credentials in Digiwin EasyFlow GP - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-13164: CWE-522 Insufficiently Protected Credentials in Digiwin EasyFlow GP

EasyFlow GP developed by Digiwin has an Insufficiently Protected Credentials vulnerability, allowing privileged remote attackers to obtain plaintext database account credentials from the system frontend.

CVE-2025-13163 identifies an insufficiently protected credentials vulnerability (CWE-522) in Digiwin EasyFlow GP, specifically affecting versions 5.8.8.3 and all 8.1.* releases. The vulnerability allows privileged remote attackers to extract plaintext database account credentials directly from the system frontend interface. This flaw arises because the application does not adequately safeguard sensitive credential information, exposing it in an accessible manner to users with elevated privileges. The CVSS 4.0 base score is 6.9, reflecting network attack vector (AV:N), low attack complexity (AC:L), no authentication required (AT:N), but requiring high privileges (PR:H). There is no user interaction needed (UI:N), and the vulnerability impacts confidentiality heavily (VC:H) without affecting integrity or availability. No known exploits have been reported in the wild, and no patches have been linked yet. The vulnerability's technical risk lies in the potential for attackers with privileged access to escalate their control by leveraging exposed database credentials, potentially compromising backend data stores and sensitive business information. The vulnerability does not involve privilege escalation or bypass but exposes critical secrets that could be used in further attacks or lateral movement within the network.

Detailed information about CVE-2025-13163: CWE-522 Insufficiently Protected Credentials in Digiwin EasyFlow GP affecting Digiwin EasyFlow GP. Get real-time upda


CVE-2025-13165: CWE-770 Allocation of Resources Without Limits or Throttling in Digiwin EasyFlow GPCVE-2025-13165 0 EasyFlow GP developed by Digiwin has a Denial of service vulnerability, allowing unauthenticated remote attackers to send specific requests that result in denial of web service. HighVulnerabilityGermanyFranceItaly+4#cve #cve-2025-13165 #cwe-770 Join the discussion	CVE Database V5	11/17/2025, 06:46:02 UTC Added: 11/17/2025, 06:53:12 UTC
CVE-2025-13164: CWE-522 Insufficiently Protected Credentials in Digiwin EasyFlow GPCVE-2025-13164 0 EasyFlow GP developed by Digiwin has an Insufficiently Protected Credentials vulnerability, allowing privileged remote attackers to obtain plaintext credentials of AD and system mail from the system frontend. MediumVulnerabilityGermanyFranceUnited Kingdom+2#cve #cve-2025-13164 #cwe-522 Join the discussion	CVE Database V5	11/17/2025, 06:23:21 UTC Added: 11/17/2025, 06:39:59 UTC
CVE-2025-13163: CWE-522 Insufficiently Protected Credentials in Digiwin EasyFlow GPCVE-2025-13163 0 EasyFlow GP developed by Digiwin has an Insufficiently Protected Credentials vulnerability, allowing privileged remote attackers to obtain plaintext database account credentials from the system frontend. MediumVulnerabilityGermanyFranceItaly+4#cve #cve-2025-13163 #cwe-522 Join the discussion	CVE Database V5	11/17/2025, 06:17:06 UTC Added: 11/17/2025, 06:39:59 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional