Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

AlienVault OTX General

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit NetSec

Reddit Cybersecurity

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

idurar-erp-crm

CVE-2026-81031 is a high-severity authorization bypass vulnerability in idurar-erp-crm versions up to and including 4.1.1. It allows any valid administrator session to change the password of any other administrator account by specifying the target account identifier in the request URL. The update handler does not verify that the authenticated user matches the account being updated, enabling arbitrary password changes and potential account takeover.

The vulnerability exists in the password update handler of idurar-erp-crm, where the authenticated user is resolved from the token middleware, but the password update is applied based on an identifier supplied in the URL path without verifying that the authenticated user matches this identifier. The route is protected only by an administrator token check, and the only ownership guard rejects a single hardcoded demo address. This flaw allows an attacker with any valid administrator session to set arbitrary passwords on other administrator accounts and subsequently sign in as those accounts. The read handler similarly accepts an identifier to select a target, facilitating exploitation.

Detailed information about CVE-2026-81031: Authorization Bypass Through User-Controlled Key in idurar idurar-erp-crm affecting idurar idurar-erp-crm. Get real-t

CVE-2026-81031: Authorization Bypass Through User-Controlled Key in idurar idurar-erp-crm - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-81031: Authorization Bypass Through User-Controlled Key in idurar idurar-erp-crm

iA Path Traversal vulnerability exists in iDURAR v2.0.0, that allows unauthenticated attackers to expose sensitive files via the download functionality.

CVE-2024-25164 identifies a path traversal vulnerability (CWE-22) in the iDURAR software version 2.0.0. This vulnerability arises due to insufficient sanitization of user input in the download functionality, allowing an unauthenticated attacker to manipulate file path parameters to access files outside the intended directory scope. By exploiting this flaw, attackers can retrieve sensitive files from the server filesystem, potentially exposing confidential information such as configuration files, credentials, or other protected data. The vulnerability requires no authentication or user interaction, making it highly accessible to remote attackers over the network. The CVSS 3.1 base score of 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) indicates that the attack vector is network-based with low complexity, no privileges or user interaction needed, and results in a high confidentiality impact without affecting integrity or availability. Although no public exploits have been reported yet, the nature of path traversal vulnerabilities and their common exploitation patterns suggest a high risk of future attacks. The lack of available patches at the time of publication necessitates immediate mitigation efforts by administrators. This vulnerability highlights the critical need for secure coding practices, especially input validation and access control enforcement in file handling features.

Detailed information about CVE-2024-25164: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-25164: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-25164: n/a


CVE-2026-81031: Authorization Bypass Through User-Controlled Key in idurar idurar-erp-crmCVE-2026-81031 0 CVE-2026-81031 is a high-severity authorization bypass vulnerability in idurar-erp-crm versions up to and including 4.1.1. It allows any valid administrator session to change the password of any other administrator account by specifying the target account identifier in the request URL. The update handler does not verify that the authenticated user matches the account being updated, enabling arbitrary password changes and potential account takeover. HighVulnerability#cve #cve-2026-81031 Join the discussion	CVE Database V5	08/26/2026, 15:44:59 UTC Added: 08/26/2026, 15:53:01 UTC
CVE-2024-25164: n/aCVE-2024-25164 0 iA Path Traversal vulnerability exists in iDURAR v2.0.0, that allows unauthenticated attackers to expose sensitive files via the download functionality. HighVulnerabilityUnited StatesGermanyUnited Kingdom+7#cve #cve-2024-25164 Join the discussion	CVE Database V5	03/04/2024, 00:00:00 UTC Added: 02/25/2026, 21:45:04 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional