Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Formwork

Formwork before 2.3.11 contains a stored cross-site scripting vulnerability in visit tracking that records the Referer header host unescaped. Unauthenticated attackers can craft malicious Referer headers to inject markup that executes in administrator browsers when viewing the Statistics panel.

CVE-2026-82451 is a stored cross-site scripting vulnerability affecting Formwork before version 2.3.15. The vulnerability arises from improper neutralization of input during web page generation, specifically in the visit tracking functionality that records the Referer header host unescaped. An unauthenticated attacker can craft a malicious Referer header to inject HTML or script code that executes in the context of administrator browsers when they access the Statistics panel. This can lead to potential session hijacking or other XSS-related impacts. The vulnerability is rated medium severity with a CVSS 4.0 score of 5.3. There is no vendor advisory or patch information available at this time.

Detailed information about CVE-2026-82451: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in getformwork Formwork affectin

CVE-2026-82451: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in getformwork Formwork - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-82451: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in getformwork Formwork

formwork

Formwork is a flat file-based Content Management System (CMS). Prior to version 2.2.0, inserting unsanitized data into the blog tag field results in stored cross‑site scripting (XSS). Any user with credentials to the Formwork CMS who accesses or edits an affected blog post will have attacker‑controlled script executed in their browser. The issue is persistent and impacts privileged administrative workflows. This issue has been patched in version 2.2.0.

CVE-2025-65956 is a stored cross-site scripting (XSS) vulnerability identified in the Formwork CMS, a flat file-based content management system. The vulnerability exists in versions prior to 2.2.0 and is caused by improper neutralization of input during web page generation, specifically in the blog tag field. Attackers who have valid credentials to the CMS can insert malicious JavaScript code into this field without proper sanitization. When an administrator or any privileged user accesses or edits the affected blog post, the injected script executes within their browser context. This persistent XSS flaw can be exploited to hijack user sessions, steal authentication tokens, perform unauthorized actions on behalf of the user, or pivot further into the network. The vulnerability impacts confidentiality, integrity, and availability of administrative workflows, as the attacker-controlled script runs with the privileges of the authenticated user. Exploitation requires authentication and user interaction (viewing or editing the post), but no complex attack vectors or elevated privileges beyond normal CMS user rights are necessary. The vulnerability has been assigned a CVSS v3.1 score of 6.5, indicating a medium severity level. The vendor has addressed the issue in Formwork version 2.2.0 by implementing proper input sanitization and output encoding to prevent script injection. No known exploits are currently reported in the wild, but the vulnerability poses a significant risk to organizations relying on Formwork CMS for content management, especially those with multiple administrators or privileged users.

Detailed information about CVE-2025-65956: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in getformwork formwork 

CVE-2025-65956: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in getformwork formwork - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-65956: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in getformwork formwork


CVE-2026-82451: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in getformwork FormworkCVE-2026-82451 0 Formwork before 2.3.11 contains a stored cross-site scripting vulnerability in visit tracking that records the Referer header host unescaped. Unauthenticated attackers can craft malicious Referer headers to inject markup that executes in administrator browsers when viewing the Statistics panel. MediumVulnerability#cve #cve-2026-82451 #gcve Join the discussion	CVE Database V5	08/29/2026, 13:47:54 UTC Added: 08/29/2026, 13:52:41 UTC
CVE-2025-65956: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in getformwork formworkCVE-2025-65956 0 Formwork is a flat file-based Content Management System (CMS). Prior to version 2.2.0, inserting unsanitized data into the blog tag field results in stored cross‑site scripting (XSS). Any user with credentials to the Formwork CMS who accesses or edits an affected blog post will have attacker‑controlled script executed in their browser. The issue is persistent and impacts privileged administrative workflows. This issue has been patched in version 2.2.0. MediumVulnerabilityGermanyFranceUnited Kingdom+5#cve #cve-2025-65956 #cwe-79 Join the discussion	CVE Database V5	11/25/2025, 23:20:23 UTC Added: 11/25/2025, 23:31:30 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional