Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

EmpireCMS

A vulnerability has been found in EmpireSoft EmpireCMS up to 8.0. Impacted is the function CheckSaveTranFiletype of the file e/class/connect.php. Such manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVE-2025-15423 is a vulnerability identified in EmpireSoft's EmpireCMS content management system, specifically affecting version 8.0. The issue resides in the CheckSaveTranFiletype function within the e/class/connect.php file, which is responsible for validating uploaded file types. Due to insufficient validation or improper handling, this function allows attackers to bypass restrictions and upload arbitrary files to the server. The vulnerability can be exploited remotely without requiring authentication or user interaction, making it accessible to unauthenticated attackers over the network. The unrestricted upload capability can be leveraged to place malicious scripts or web shells, potentially enabling remote code execution, data theft, or further system compromise. The vendor was notified early but has not issued any patches or advisories, and the exploit details have been publicly disclosed, increasing the risk of exploitation. The CVSS 4.0 vector indicates network attack vector (AV:N), low attack complexity (AC:L), no privileges required (PR:L), no user interaction (UI:N), and limited impact on confidentiality, integrity, and availability (VC:L, VI:L, VA:L). No known exploits are currently active in the wild, but the public disclosure heightens the threat landscape. The vulnerability affects only EmpireCMS version 8.0, which is used primarily in certain regional markets and industries relying on this CMS platform.

Detailed information about CVE-2025-15423: Unrestricted Upload in EmpireSoft EmpireCMS affecting EmpireSoft EmpireCMS. Get real-time updates, technical details,

CVE-2025-15423: Unrestricted Upload in EmpireSoft EmpireCMS - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-15423: Unrestricted Upload in EmpireSoft EmpireCMS

A flaw has been found in EmpireSoft EmpireCMS up to 8.0. This issue affects the function egetip of the file e/class/connect.php of the component IP Address Handler. This manipulation causes protection mechanism failure. The attack may be initiated remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVE-2025-15422 is a vulnerability identified in EmpireSoft's EmpireCMS, a content management system widely used for website management. The flaw resides in the IP Address Handler component, specifically within the function 'egetip' located in the file e/class/connect.php. This function is responsible for handling IP address-related operations, and the vulnerability causes a failure in the protection mechanism designed to secure these operations. The failure allows an attacker to manipulate the function remotely without requiring any authentication or user interaction, potentially bypassing security controls. The vulnerability has been assigned a CVSS 4.0 base score of 6.9, reflecting a medium severity level due to its network attack vector, low attack complexity, and lack of required privileges or user interaction. The impact primarily affects the integrity of the system, possibly allowing attackers to interfere with IP-based protections or tracking mechanisms. Despite early notification, the vendor has not responded or released a patch, and a public exploit is available, increasing the risk of exploitation. No confirmed active exploitation in the wild has been reported to date. The vulnerability affects EmpireCMS version 8.0, which is currently the latest known affected version. Given the nature of the flaw, attackers could leverage it to bypass IP-based restrictions, potentially facilitating further attacks such as unauthorized access, data manipulation, or evasion of security controls. The lack of vendor response and patch availability underscores the urgency for organizations to implement interim mitigations and monitor their systems closely.

Detailed information about CVE-2025-15422: Protection Mechanism Failure in EmpireSoft EmpireCMS affecting EmpireSoft EmpireCMS. Get real-time updates, technical

CVE-2025-15422: Protection Mechanism Failure in EmpireSoft EmpireCMS - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-15422: Protection Mechanism Failure in EmpireSoft EmpireCMS


CVE-2025-15423: Unrestricted Upload in EmpireSoft EmpireCMSCVE-2025-15423 0 A vulnerability has been found in EmpireSoft EmpireCMS up to 8.0. Impacted is the function CheckSaveTranFiletype of the file e/class/connect.php. Such manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. MediumVulnerabilityChinaIndiaRussia+7#cve #cve-2025-15423 Join the discussion	CVE Database V5	01/02/2026, 02:02:09 UTC Added: 01/02/2026, 22:16:01 UTC
CVE-2025-15422: Protection Mechanism Failure in EmpireSoft EmpireCMSCVE-2025-15422 0 A flaw has been found in EmpireSoft EmpireCMS up to 8.0. This issue affects the function egetip of the file e/class/connect.php of the component IP Address Handler. This manipulation causes protection mechanism failure. The attack may be initiated remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way. MediumVulnerabilityChinaUnited StatesIndia+7#cve #cve-2025-15422 Join the discussion	CVE Database V5	01/02/2026, 01:32:07 UTC Added: 01/02/2026, 01:43:47 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional