Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

AlienVault OTX General

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit NetSec

Reddit Cybersecurity

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

food-ordering-cve

A vulnerability was determined in code-projects Food Ordering System 1.0. This affects an unknown function of the file /admin/menu.php. Executing a manipulation of the argument itemPrice can lead to sql injection. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized.

CVE-2025-12315 identifies a SQL injection vulnerability in the code-projects Food Ordering System version 1.0, located in the /admin/menu.php file. The vulnerability arises from improper sanitization of the itemPrice parameter, which is used in SQL queries without adequate validation or parameterization. An attacker with authenticated access to the administrative interface can remotely manipulate this parameter to inject malicious SQL code. This can lead to unauthorized data disclosure, modification, or deletion within the backend database, impacting confidentiality, integrity, and availability. The CVSS 4.0 vector indicates network attack vector (AV:N), low attack complexity (AC:L), no user interaction (UI:N), but requires high privileges (PR:H), and results in low impacts on confidentiality, integrity, and availability (VC:L, VI:L, VA:L). No public exploit code is currently known, but the vulnerability has been publicly disclosed, increasing the risk of future exploitation. The lack of patches or official fixes at the time of disclosure necessitates immediate mitigation efforts. The vulnerability is limited to version 1.0 of the product, which may be deployed in niche or small to medium enterprises using this food ordering system. The attack requires administrative credentials, which reduces the likelihood of exploitation by external unauthenticated attackers but still poses a significant risk if credentials are compromised or insider threats exist.

Detailed information about CVE-2025-12315: SQL Injection in code-projects Food Ordering System affecting code-projects Food Ordering System. Get real-time updat

CVE-2025-12315: SQL Injection in code-projects Food Ordering System - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-12315: SQL Injection in code-projects Food Ordering System

A vulnerability was found in code-projects Food Ordering System 1.0. The impacted element is an unknown function of the file /admin/deleteitem.php. Performing a manipulation of the argument itemID results in sql injection. Remote exploitation of the attack is possible. The exploit has been made public and could be used.

CVE-2025-12314 identifies a SQL injection vulnerability in the code-projects Food Ordering System version 1.0. The flaw exists in the /admin/deleteitem.php file, where the itemID parameter is not properly sanitized before being used in SQL queries. This allows an attacker with administrative privileges to inject malicious SQL code remotely, potentially manipulating the database. The vulnerability does not require user interaction but does require the attacker to have high-level privileges, which limits the attack surface. The CVSS 4.0 vector indicates network attack vector (AV:N), low attack complexity (AC:L), no authentication required (AT:N) but with high privileges (PR:H), no user interaction (UI:N), and low impact on confidentiality, integrity, and availability (VC:L, VI:L, VA:L). Although no exploits are currently observed in the wild, the public disclosure of exploit code increases the risk of exploitation. The vulnerability could allow unauthorized data modification or deletion, potentially disrupting business operations or exposing sensitive information. No official patches have been linked yet, so mitigation relies on secure coding practices and access controls.

Detailed information about CVE-2025-12314: SQL Injection in code-projects Food Ordering System affecting code-projects Food Ordering System. Get real-time updat

CVE-2025-12314: SQL Injection in code-projects Food Ordering System - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-12314: SQL Injection in code-projects Food Ordering System


CVE-2025-12315: SQL Injection in code-projects Food Ordering SystemCVE-2025-12315 0 A vulnerability was determined in code-projects Food Ordering System 1.0. This affects an unknown function of the file /admin/menu.php. Executing a manipulation of the argument itemPrice can lead to sql injection. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. MediumVulnerabilityUnited StatesIndiaUnited Kingdom+7#cve #cve-2025-12315 Join the discussion	CVE Database V5	10/27/2025, 20:02:12 UTC Added: 10/27/2025, 20:22:45 UTC
CVE-2025-12314: SQL Injection in code-projects Food Ordering SystemCVE-2025-12314 0 A vulnerability was found in code-projects Food Ordering System 1.0. The impacted element is an unknown function of the file /admin/deleteitem.php. Performing a manipulation of the argument itemID results in sql injection. Remote exploitation of the attack is possible. The exploit has been made public and could be used. MediumVulnerabilityUnited StatesIndiaUnited Kingdom+7#cve #cve-2025-12314 Join the discussion	CVE Database V5	10/27/2025, 20:02:09 UTC Added: 10/27/2025, 20:22:45 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional