Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Krebs on Security

Palo Alto Unit 42

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

jjjjjzr19

A vulnerability was identified in code-projects Online Guitar Store 1.0. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the argument L_email leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used.

CVE-2025-15410 is a SQL injection vulnerability identified in the Online Guitar Store version 1.0 developed by code-projects. The vulnerability resides in the /login.php script, where the L_email parameter is improperly sanitized, allowing an attacker to inject malicious SQL code remotely without requiring authentication or user interaction. This injection can manipulate backend SQL queries, potentially exposing or altering sensitive data stored in the database. The vulnerability has a CVSS 4.0 base score of 6.9, indicating medium severity, with attack vector as network (remote), low attack complexity, no privileges or user interaction needed, and limited impact on confidentiality, integrity, and availability. Although no active exploitation has been reported, a public exploit is available, increasing the risk of attacks. The vulnerability affects only version 1.0 of the Online Guitar Store, which is a niche e-commerce platform. No official patches or updates have been linked yet, requiring users to implement alternative mitigations. The vulnerability highlights the importance of input validation and parameterized queries in web applications to prevent SQL injection attacks.

Detailed information about CVE-2025-15410: SQL Injection in code-projects Online Guitar Store affecting code-projects Online Guitar Store. Get real-time updates

CVE-2025-15410: SQL Injection in code-projects Online Guitar Store - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-15410: SQL Injection in code-projects Online Guitar Store

A vulnerability has been found in code-projects Online Guitar Store 1.0. This impacts an unknown function of the file /admin/Create_category.php. Such manipulation of the argument dre_Ctitle leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to the public and may be used.

CVE-2025-15407 identifies a SQL Injection vulnerability in the Online Guitar Store version 1.0 developed by code-projects. The vulnerability exists in the /admin/Create_category.php script, where the dre_Ctitle parameter is improperly sanitized, allowing an attacker to inject malicious SQL code remotely. This injection flaw can be exploited without any authentication or user interaction, enabling attackers to manipulate backend database queries. Potential consequences include unauthorized data disclosure, data modification, or even complete compromise of the database server. The CVSS 4.0 vector indicates network attack vector (AV:N), low attack complexity (AC:L), no privileges required (PR:N), no user interaction (UI:N), and partial impacts on confidentiality, integrity, and availability (VC:L, VI:L, VA:L). Although no known exploits are currently active in the wild, the public disclosure of the exploit code increases the likelihood of exploitation attempts. No official patches or updates have been released by the vendor, leaving users exposed. The vulnerability is specific to version 1.0 of the product, which is a niche e-commerce platform for selling guitars online. The lack of security controls such as prepared statements or parameterized queries in the affected script is the root cause. Organizations using this software should urgently review their input handling and restrict access to the admin interface to mitigate risk.

Detailed information about CVE-2025-15407: SQL Injection in code-projects Online Guitar Store affecting code-projects Online Guitar Store. Get real-time updates

CVE-2025-15407: SQL Injection in code-projects Online Guitar Store - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-15407: SQL Injection in code-projects Online Guitar Store


CVE-2025-15410: SQL Injection in code-projects Online Guitar StoreCVE-2025-15410 0 A vulnerability was identified in code-projects Online Guitar Store 1.0. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the argument L_email leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. MediumVulnerabilityUnited StatesUnited KingdomGermany+7#cve #cve-2025-15410 Join the discussion	CVE Database V5	01/01/2026, 19:02:05 UTC Added: 01/01/2026, 19:13:48 UTC
CVE-2025-15407: SQL Injection in code-projects Online Guitar StoreCVE-2025-15407 0 A vulnerability has been found in code-projects Online Guitar Store 1.0. This impacts an unknown function of the file /admin/Create_category.php. Such manipulation of the argument dre_Ctitle leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. MediumVulnerabilityUnited StatesIndiaGermany+4#cve #cve-2025-15407 Join the discussion	CVE Database V5	01/01/2026, 17:32:05 UTC Added: 01/01/2026, 17:43:50 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional