Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

WRC-BE36QS-B

Hidden functionality issue exists in WRC-BE36QS-B and WRC-W701-B. If exploited, the product's hidden debug function may be enabled by a remote attacker who can log in to WebGUI.

CVE-2025-46267 is a medium-severity vulnerability affecting ELECOM CO.,LTD.'s wireless router models WRC-BE36QS-B and WRC-W701-B, specifically versions v1.1.3 and earlier. The vulnerability stems from a hidden debug functionality embedded within the device's firmware that can be remotely enabled by an attacker who has authenticated access to the device's WebGUI management interface. Although the vulnerability does not allow unauthenticated remote exploitation, it permits a user with valid credentials to activate this hidden debug mode, which is not intended for normal operation. Enabling this debug functionality could expose additional attack surfaces or sensitive internal operations, potentially allowing an attacker to escalate privileges, manipulate device behavior, or interfere with the integrity of the device's configuration. The CVSS v3.1 base score is 4.9, reflecting a network attack vector with low attack complexity but requiring high privileges (authenticated user) and no user interaction. The impact is primarily on integrity, with no direct confidentiality or availability impact indicated. No known exploits are currently reported in the wild, and no patches have been publicly linked yet. The vulnerability was published on July 22, 2025, and assigned by JPCERT, indicating a recognized security concern in the Japanese cybersecurity community. The lack of patches and the presence of hidden debug functions suggest that attackers with internal access or stolen credentials could leverage this vulnerability to compromise device integrity or facilitate further attacks within the network environment where these routers are deployed.

Detailed information about CVE-2025-46267: Hidden functionality in ELECOM CO.,LTD. WRC-BE36QS-B affecting ELECOM CO.,LTD. WRC-BE36QS-B. Get real-time updates, t

CVE-2025-46267: Hidden functionality in ELECOM CO.,LTD. WRC-BE36QS-B - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-46267: Hidden functionality in ELECOM CO.,LTD. WRC-BE36QS-B

WRC-BE36QS-B and WRC-W701-B contain an improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in WebGUI. If exploited, an arbitrary OS command may be executed by a remote attacker who can log in to WebGUI.

CVE-2025-53472 is a high-severity OS command injection vulnerability affecting ELECOM CO.,LTD.'s wireless router models WRC-BE36QS-B and WRC-W701-B, specifically versions v1.1.3 and earlier. The vulnerability exists in the WebGUI management interface, where improper neutralization of special elements in user-supplied input allows an authenticated remote attacker to execute arbitrary operating system commands. The vulnerability requires the attacker to have valid credentials to log into the WebGUI, but no additional user interaction is needed beyond authentication. Exploitation could lead to full compromise of the device, allowing the attacker to execute commands with the privileges of the WebGUI process, potentially leading to confidentiality breaches, integrity violations, and availability disruptions. The CVSS v3.1 base score is 7.2 (high), reflecting network attack vector, low attack complexity, high privileges required, no user interaction, and high impact on confidentiality, integrity, and availability. Although no known exploits are currently reported in the wild, the vulnerability poses a significant risk given the critical role of routers in network infrastructure and the potential for lateral movement or persistent access within affected networks.

Detailed information about CVE-2025-53472: Improper neutralization of special elements used in an OS command ('OS Command Injection') in ELECOM CO.,LTD. WRC-BE3

CVE-2025-53472: Improper neutralization of special elements used in an OS command ('OS Command Injection') in ELECOM CO.,LTD. WRC-BE36QS-B - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-53472: Improper neutralization of special elements used in an OS command ('OS Command Injection') in ELECOM CO.,LTD. WRC-BE36QS-B


CVE-2025-46267: Hidden functionality in ELECOM CO.,LTD. WRC-BE36QS-BCVE-2025-46267 0 Hidden functionality issue exists in WRC-BE36QS-B and WRC-W701-B. If exploited, the product's hidden debug function may be enabled by a remote attacker who can log in to WebGUI. MediumVulnerabilityGermanyFranceUnited Kingdom+4#cve #cve-2025-46267 Join the discussion	CVE Database V5	07/22/2025, 09:30:21 UTC Added: 07/22/2025, 09:46:23 UTC
CVE-2025-53472: Improper neutralization of special elements used in an OS command ('OS Command Injection') in ELECOM CO.,LTD. WRC-BE36QS-BCVE-2025-53472 0 WRC-BE36QS-B and WRC-W701-B contain an improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in WebGUI. If exploited, an arbitrary OS command may be executed by a remote attacker who can log in to WebGUI. HighVulnerabilityGermanyFranceUnited Kingdom+4#cve #cve-2025-53472 Join the discussion	CVE Database V5	07/22/2025, 09:30:01 UTC Added: 07/22/2025, 09:46:23 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional