Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

Threatpost

SecurityWeek

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

IdeaCMS

A vulnerability has been found in IdeaCMS up to 1.8. This affects the function whereRaw of the file app/common/logic/index/Coupon.php. Such manipulation of the argument params leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

CVE-2025-14245 is a SQL injection vulnerability identified in IdeaCMS versions 1.0 through 1.8, specifically within the whereRaw function of the Coupon.php file located at app/common/logic/index/. The vulnerability arises due to improper sanitization or validation of the params argument passed to whereRaw, which is used to construct SQL queries. This flaw enables a remote attacker to inject malicious SQL code, potentially allowing unauthorized data access, modification, or deletion within the underlying database. The attack vector requires no authentication or user interaction, making it highly accessible to threat actors scanning for vulnerable IdeaCMS installations. The CVSS 4.0 base score is 6.9 (medium severity), reflecting network attack vector, low attack complexity, and no privileges or user interaction required, but with limited impact on confidentiality, integrity, and availability. Although no known exploits have been observed in the wild, the public disclosure of the vulnerability increases the risk of exploitation. The absence of official patches or updates at the time of publication necessitates immediate mitigation efforts by administrators. The vulnerability primarily affects websites using IdeaCMS for content management, especially those employing the Coupon.php functionality, which may be common in e-commerce or promotional platforms. Exploitation could lead to data leakage, unauthorized data manipulation, or denial of service, impacting business operations and customer trust.

Detailed information about CVE-2025-14245: SQL Injection in IdeaCMS affecting null IdeaCMS. Get real-time updates, technical details, and mitigation strategies.

CVE-2025-14245: SQL Injection in IdeaCMS - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-14245: SQL Injection in IdeaCMS

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional