Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

EasyImages

An arbitrary file upload vulnerability in the /admin/manager.php component of EasyImages 2.0 v2.8.6 and below allows attackers to execute arbitrary code via uploading a crafted PHP file.

CVE-2025-65471 is an arbitrary file upload vulnerability identified in the /admin/manager.php component of EasyImages 2.0 version 2.8.6 and earlier. This vulnerability allows an attacker with limited privileges (PR:L) to upload a maliciously crafted PHP file to the server without requiring any user interaction (UI:N). The uploaded file can then be executed on the server, enabling remote code execution (RCE). The vulnerability stems from improper validation and sanitization of uploaded files, classified under CWE-434 (Unrestricted Upload of File with Dangerous Type). The attack vector is network-based (AV:N), meaning the attacker can exploit it remotely over the internet. The vulnerability affects the confidentiality, integrity, and availability of the affected system, as attackers can execute arbitrary code, potentially leading to data theft, system manipulation, or denial of service. The CVSS v3.1 base score is 8.8, indicating a high severity level. No patches or fixes are currently listed, and no known exploits have been reported in the wild as of the publication date (December 11, 2025). However, the vulnerability's characteristics suggest it could be exploited rapidly once weaponized. The affected versions are not explicitly detailed beyond the version 2.8.6 and below, so organizations using EasyImages should verify their version status. The vulnerability is particularly critical because it does not require user interaction and can be exploited remotely with low attack complexity. The lack of authentication requirement is mitigated by the presence of limited privileges, but if the admin interface is exposed or credentials are compromised, exploitation becomes trivial. This vulnerability poses a significant risk to web servers running EasyImages, especially those exposing the admin interface to the internet without adequate protections.

Detailed information about CVE-2025-65471: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2025-65471: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-65471: n/a

A Cross-Site Request Forgery (CSRF) in the /admin/admin.inc.php component of EasyImages 2.0 v2.8.6 and below allows attackers to escalate privileges to Administrator via user interaction with a malicious web page.

CVE-2025-65472 is a Cross-Site Request Forgery (CSRF) vulnerability identified in the /admin/admin.inc.php component of EasyImages 2.0 version 2.8.6 and earlier. CSRF vulnerabilities allow attackers to perform unauthorized actions on behalf of authenticated users by exploiting the trust a web application places in the user's browser. In this case, an attacker crafts a malicious web page that, when visited by an authenticated user, triggers unauthorized administrative actions without the user's explicit consent. This vulnerability enables privilege escalation to Administrator level, granting the attacker full control over the affected EasyImages installation. The CVSS 3.1 base score of 8.8 indicates a high-severity issue, with attack vector being network-based (AV:N), low attack complexity (AC:L), no privileges required (PR:N), but requiring user interaction (UI:R). The impact on confidentiality, integrity, and availability is high (C:H/I:H/A:H), meaning an attacker can fully compromise the system's data and operations. No patches or mitigations have been officially released at the time of publication, and no known exploits are reported in the wild. The vulnerability is categorized under CWE-352, which corresponds to CSRF attacks. The lack of authentication requirement combined with the ability to escalate privileges makes this vulnerability particularly dangerous. Organizations using EasyImages for content management or image handling in their web infrastructure should prioritize assessment and mitigation to prevent potential exploitation.

Detailed information about CVE-2025-65472: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2025-65472: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-65472: n/a

A vulnerability was identified in icret EasyImages up to 2.8.6. This affects an unknown part of the file /app/upload.php of the component SVG Image Handler. The manipulation of the argument File leads to cross site scripting. It is possible to initiate the attack remotely.

CVE-2025-13415 identifies a cross-site scripting (XSS) vulnerability in the icret EasyImages product, versions 2.8.0 through 2.8.6. The vulnerability is located in the SVG Image Handler component, specifically within the /app/upload.php file. The issue stems from insufficient sanitization or validation of the 'File' parameter, which can be manipulated by an attacker to inject malicious JavaScript code. This vulnerability is remotely exploitable without authentication but requires some user interaction, such as a victim clicking a crafted link or visiting a malicious page that triggers the payload. The CVSS 4.0 score of 5.1 reflects a medium severity level, indicating moderate impact primarily on confidentiality and integrity through client-side script execution. Exploitation could allow attackers to perform actions like session hijacking, cookie theft, or redirect users to malicious sites, potentially leading to further compromise or data leakage. No known public exploits have been reported yet, but the vulnerability's presence in a widely used image handling component makes it a notable risk. The lack of patches or official fixes at the time of publication necessitates immediate attention from administrators using affected versions. The vulnerability does not affect availability directly but can undermine user trust and system integrity.

Detailed information about CVE-2025-13415: Cross Site Scripting in icret EasyImages affecting icret EasyImages. Get real-time updates, technical details, and mi


CVE-2025-65471: n/aCVE-2025-65471 0 An arbitrary file upload vulnerability in the /admin/manager.php component of EasyImages 2.0 v2.8.6 and below allows attackers to execute arbitrary code via uploading a crafted PHP file. HighVulnerabilityGermanyFranceUnited Kingdom+3#cve #cve-2025-65471 Join the discussion	CVE Database V5	12/11/2025, 00:00:00 UTC Added: 12/11/2025, 16:53:56 UTC
CVE-2025-65472: n/aCVE-2025-65472 0 A Cross-Site Request Forgery (CSRF) in the /admin/admin.inc.php component of EasyImages 2.0 v2.8.6 and below allows attackers to escalate privileges to Administrator via user interaction with a malicious web page. HighVulnerabilityGermanyFranceUnited Kingdom+5#cve #cve-2025-65472 Join the discussion	CVE Database V5	12/11/2025, 00:00:00 UTC Added: 12/11/2025, 16:38:56 UTC
CVE-2025-13415: Cross Site Scripting in icret EasyImagesCVE-2025-13415 0 A vulnerability was identified in icret EasyImages up to 2.8.6. This affects an unknown part of the file /app/upload.php of the component SVG Image Handler. The manipulation of the argument File leads to cross site scripting. It is possible to initiate the attack remotely. MediumVulnerabilityGermanyFranceUnited Kingdom+5#cve #cve-2025-13415 Join the discussion	CVE Database V5	11/19/2025, 22:02:06 UTC Added: 11/19/2025, 22:07:43 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional