Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit NetSec

Reddit Cybersecurity

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

AWS Security Bulletins

GCP Kubernetes Security

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

A security vulnerability has been detected in xiweicheng TMS up to 2.28.0. This affects the function createComment of the file /admin/blog/comment/create. Such manipulation of the argument content leads to cross site scripting. The attack may be performed from remote. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVE-2025-14801 is a cross-site scripting vulnerability identified in the xiweicheng TMS product, affecting all versions up to 2.28.0. The vulnerability resides in the createComment function of the /admin/blog/comment/create endpoint, where the content argument is improperly sanitized, allowing attackers to inject malicious JavaScript code. This flaw can be exploited remotely by an attacker with high privileges who can interact with the system, typically an authenticated administrator or user with comment creation rights. The vulnerability does not require authentication bypass but does require user interaction, such as an administrator viewing or interacting with the injected comment. The CVSS 4.0 base score is 4.8 (medium severity), reflecting the limited scope and required conditions for exploitation. The vendor was notified early but has not issued any patches or advisories, and no known exploits have been detected in the wild to date. The vulnerability could enable attackers to execute arbitrary scripts in the context of the administrative interface, potentially leading to session hijacking, unauthorized actions, or phishing attacks targeting administrators. Given the administrative nature of the affected endpoint, the impact on confidentiality and integrity is moderate, while availability impact is minimal. The vulnerability affects a broad range of versions, indicating a long-standing issue in the product's comment handling functionality.

Detailed information about CVE-2025-14801: Cross Site Scripting in xiweicheng TMS affecting xiweicheng TMS. Get real-time updates, technical details, and mitiga

CVE-2025-14801: Cross Site Scripting in xiweicheng TMS - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-14801: Cross Site Scripting in xiweicheng TMS

Phpgurukul Tourism Management System v2.0 is vulnerable to Unrestricted Upload of File with Dangerous Type via /tms/admin/change-image.php. When updating a current package, there are no checks for what types of files are uploaded from the image.

The vulnerability identified as CVE-2024-32256 affects the Phpgurukul Tourism Management System version 2.0. It is classified under CWE-434, which pertains to Unrestricted Upload of File with Dangerous Type. The issue resides in the /tms/admin/change-image.php script, which is used to update images associated with tourism packages. This script does not enforce any validation or filtering on the types of files that can be uploaded, allowing an authenticated attacker to upload arbitrary files, including potentially malicious scripts or executables. The CVSS 3.1 base score is 8.1, indicating a high severity level, with the vector AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H. This means the attack can be performed remotely over the network with low attack complexity, requires low privileges (authenticated user), no user interaction, and impacts integrity and availability but not confidentiality. The lack of file type restrictions can lead to remote code execution if the uploaded file is a web shell or similar payload, enabling attackers to execute arbitrary commands, modify data, or disrupt service availability. No patches or official fixes have been published yet, and no known exploits are reported in the wild. The vulnerability is particularly dangerous in environments where multiple users have upload privileges or where the system is exposed to the internet. The tourism management system is likely used by travel agencies, tour operators, and related businesses, which may store sensitive customer and booking data, increasing the risk of broader impact if compromised.

Detailed information about CVE-2024-32256: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-32256: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-32256: n/a


CVE-2025-14801: Cross Site Scripting in xiweicheng TMSCVE-2025-14801 0 A security vulnerability has been detected in xiweicheng TMS up to 2.28.0. This affects the function createComment of the file /admin/blog/comment/create. Such manipulation of the argument content leads to cross site scripting. The attack may be performed from remote. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way. MediumVulnerabilityGermanyFranceUnited Kingdom+4#cve #cve-2025-14801 Join the discussion	CVE Database V5	12/17/2025, 02:02:06 UTC Added: 12/17/2025, 02:08:22 UTC
CVE-2024-32256: n/aCVE-2024-32256 0 Phpgurukul Tourism Management System v2.0 is vulnerable to Unrestricted Upload of File with Dangerous Type via /tms/admin/change-image.php. When updating a current package, there are no checks for what types of files are uploaded from the image. HighVulnerabilityGermanyFranceItaly+6#cve #cve-2024-32256 Join the discussion	CVE Database V5	04/16/2024, 00:00:00 UTC Added: 02/06/2026, 15:15:09 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional