Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

Threatpost

SecurityWeek

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

A vulnerability, which was classified as problematic, has been found in Gnuboard g6 up to 6.0.10. This issue affects some unknown processing of the file /bbs/scrap_popin_update/qa/ of the component Post Reply Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

CVE-2025-7786 is a cross-site scripting (XSS) vulnerability identified in Gnuboard g6, a popular open-source bulletin board system widely used for community forums and content management. The vulnerability affects all versions up to and including 6.0.10. Specifically, the flaw exists in the processing of the /bbs/scrap_popin_update/qa/ endpoint within the Post Reply Handler component. This endpoint fails to properly sanitize user-supplied input, allowing an attacker to inject malicious scripts that execute in the context of the victim's browser. The vulnerability is remotely exploitable without authentication, requiring only user interaction (e.g., clicking a crafted link or visiting a malicious page) to trigger the attack. The CVSS v4.0 base score is 5.1, indicating a medium severity level. The vector details show that the attack vector is network-based (AV:N), with low attack complexity (AC:L), no privileges required (PR:L, meaning low privileges but some authentication may be needed), and user interaction is necessary (UI:P). The impact affects integrity and availability to a limited extent, with no confidentiality impact. Although no public exploits are currently known in the wild, the vulnerability has been publicly disclosed, increasing the risk of exploitation. The lack of official patches at the time of disclosure means that affected organizations must implement interim mitigations to reduce exposure. This vulnerability could be leveraged to perform session hijacking, defacement, or phishing attacks by injecting malicious JavaScript, potentially compromising user accounts and trust in affected web applications.

Detailed information about CVE-2025-7786: Cross Site Scripting in Gnuboard g6 affecting Gnuboard g6. Get real-time updates, technical details, and mitigation st

CVE-2025-7786: Cross Site Scripting in Gnuboard g6 - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-7786: Cross Site Scripting in Gnuboard g6

There is an Open Redirect vulnerability in Gnuboard v6.0.4 and below via the `url` parameter in login path.

CVE-2024-39097 identifies an Open Redirect vulnerability in Gnuboard, an open-source web content management system widely used in certain regions for building community and bulletin board websites. The vulnerability is triggered via the 'url' parameter in the login path, which improperly validates or sanitizes user-supplied input. This allows an attacker to craft a malicious URL that, when clicked by a user, redirects them to an arbitrary external website controlled by the attacker. Such redirects can be leveraged in phishing campaigns to trick users into divulging credentials or downloading malware, or to bypass security controls that rely on URL origin checks. The vulnerability does not require authentication but does require user interaction (clicking the malicious link). The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) indicates network attack vector, low attack complexity, no privileges required, user interaction required, scope changed, and low confidentiality and integrity impacts with no availability impact. No patches or fixes have been linked yet, and no active exploitation has been reported. The CWE-601 classification confirms this is a classic Open Redirect issue, a common web application security flaw.

Detailed information about CVE-2024-39097: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-39097: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-39097: n/a


CVE-2025-7786: Cross Site Scripting in Gnuboard g6CVE-2025-7786 0 A vulnerability, which was classified as problematic, has been found in Gnuboard g6 up to 6.0.10. This issue affects some unknown processing of the file /bbs/scrap_popin_update/qa/ of the component Post Reply Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. MediumVulnerabilityGermanyFranceUnited Kingdom+7#cve #cve-2025-7786 Join the discussion	CVE Database V5	07/18/2025, 13:14:05 UTC Added: 07/18/2025, 13:31:11 UTC
CVE-2024-39097: n/aCVE-2024-39097 0 There is an Open Redirect vulnerability in Gnuboard v6.0.4 and below via the `url` parameter in login path. MediumVulnerabilitySouth KoreaGermanyFrance+2#cve #cve-2024-39097 Join the discussion	CVE Database V5	08/26/2024, 00:00:00 UTC Added: 10/30/2025, 23:41:23 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional