Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit BlueTeam

Reddit ThreatIntel

Reddit Malware

Reddit Reverse Engineering

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

erupt

Erupt versions up to and including 2.3.0 contain an HQL injection vulnerability that allows authenticated users with query permissions to bypass tree-scoped data filters. This is achieved by injecting unescaped quotes into the linkTreeVal parameter of a specific POST API endpoint, enabling attackers to append always-true OR clauses or boolean subqueries to access unauthorized data.

CVE-2026-111390 describes an HQL injection vulnerability in Erupt through version 2.3.0. Authenticated users with query permissions on entities that have String-keyed linkTree targets can exploit this flaw by injecting unescaped quotes into the linkTreeVal parameter of the POST /erupt-api/data/table/{erupt} endpoint. This injection allows bypassing of tree-scoped data filters by appending always-true OR clauses or boolean subqueries, potentially exposing data from other mapped entities.

Erupt versions up to and including 2.3.0 contain an HQL injection vulnerability that allows authenticated users with query permissions to bypass tree-scoped data filters. This is achieved by injecting unescaped quotes into the linkTreeVal parameter of a specific POST API endpoint, enabling attackers

CVE-2026-111390: SQL Injection: Hibernate in erupts erupt

An arbitrary file upload vulnerability in the component /upload/GoodsCategory/image of erupt v1.12.19 allows attackers to execute arbitrary code via uploading a crafted file.

CVE-2025-45855 is an arbitrary file upload vulnerability identified in the /upload/GoodsCategory/image component of the erupt framework version 1.12.19. This vulnerability allows an attacker to upload crafted files to the server, which can lead to the execution of arbitrary code. The root cause is related to improper validation or sanitization of uploaded files, classified under CWE-434 (Unrestricted Upload of File with Dangerous Type). Exploiting this vulnerability requires no privileges (PR:N) but does require user interaction (UI:R), such as convincing a user to upload a malicious file. The attack vector is network-based (AV:N), meaning the attacker can exploit it remotely. The vulnerability impacts confidentiality and integrity to a limited extent (C:L/I:L) but does not affect availability (A:N). The CVSS v3.1 base score is 5.4, indicating a medium severity level. No known exploits are currently reported in the wild, and no patches or vendor advisories are available at this time. The vulnerability's scope is unchanged (S:U), meaning the impact is limited to the vulnerable component without affecting other system components. Given the nature of arbitrary file upload vulnerabilities, successful exploitation could allow attackers to execute malicious scripts or commands on the server, potentially leading to further compromise of the system or lateral movement within the network. However, the requirement for user interaction and the lack of privilege requirements somewhat limit the ease of exploitation and impact severity.

Detailed information about CVE-2025-45855: n/a in n/a affecting n/a n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2025-45855: n/a in n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-45855: n/a


CVE-2026-111390: SQL Injection: Hibernate in erupts eruptCVE-2026-111390 0 Erupt versions up to and including 2.3.0 contain an HQL injection vulnerability that allows authenticated users with query permissions to bypass tree-scoped data filters. This is achieved by injecting unescaped quotes into the linkTreeVal parameter of a specific POST API endpoint, enabling attackers to append always-true OR clauses or boolean subqueries to access unauthorized data. MediumVulnerability#cve #cve-2026-111390 Join the discussion	CVE Database V5	10/16/2026, 11:38:02 UTC Added: 10/16/2026, 11:49:22 UTC
CVE-2025-45855: n/aCVE-2025-45855 0 An arbitrary file upload vulnerability in the component /upload/GoodsCategory/image of erupt v1.12.19 allows attackers to execute arbitrary code via uploading a crafted file. MediumVulnerabilityGermanyFranceNetherlands+4#cve #cve-2025-45855 Join the discussion	CVE Database V5	06/03/2025, 00:00:00 UTC Added: 06/03/2025, 14:14:34 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional