Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit NetSec

Reddit Cybersecurity

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

AWS Security Bulletins

GCP Kubernetes Security

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

kodicms

A security vulnerability has been detected in Kohana KodiCMS up to 13.82.135. This impacts the function Save of the file cms/modules/kodicms/classes/kodicms/model/file.php of the component Layout API Endpoint. The manipulation of the argument content leads to code injection. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVE-2025-15393 identifies a code injection vulnerability in the Kohana KodiCMS content management system, affecting versions up to 13.82.135. The flaw exists in the Save function within the cms/modules/kodicms/classes/kodicms/model/file.php file, part of the Layout API Endpoint component. Specifically, the vulnerability stems from improper sanitization or validation of the 'content' argument passed to this function, which allows an attacker to inject malicious code remotely. This code injection can lead to arbitrary code execution on the server hosting KodiCMS, potentially compromising the confidentiality, integrity, and availability of the system. The attack vector is network-based, requiring no authentication or user interaction, making exploitation relatively straightforward for a remote attacker. Despite early notification, the vendor has not responded or issued patches, and no known exploits have been observed in the wild yet. The CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P) indicates low attack complexity, no user interaction, and partial impacts on confidentiality, integrity, and availability. This vulnerability poses a significant risk to organizations relying on KodiCMS for website or content management, as successful exploitation could lead to unauthorized code execution, data breaches, defacement, or service outages.

Detailed information about CVE-2025-15393: Code Injection in Kohana KodiCMS affecting Kohana KodiCMS. Get real-time updates, technical details, and mitigation s

CVE-2025-15393: Code Injection in Kohana KodiCMS - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-15393: Code Injection in Kohana KodiCMS

A weakness has been identified in Kohana KodiCMS up to 13.82.135. This affects the function like of the file cms/modules/pages/classes/kodicms/model/page.php of the component Search API Endpoint. Executing manipulation of the argument keyword can lead to sql injection. It is possible to launch the attack remotely. The exploit has been made available to the public and could be exploited. The vendor was contacted early about this disclosure but did not respond in any way.

CVE-2025-15392 identifies a SQL injection vulnerability in Kohana KodiCMS up to version 13.82.135, specifically within the Search API Endpoint component. The vulnerability resides in the 'like' function located in cms/modules/pages/classes/kodicms/model/page.php. This function improperly handles the 'keyword' parameter, allowing an attacker to inject malicious SQL code. Because the endpoint is accessible remotely and does not require authentication or user interaction, an attacker can exploit this flaw to execute arbitrary SQL queries against the backend database. This can lead to unauthorized data access, data modification, or potentially full database compromise. The vulnerability has a CVSS 4.0 score of 5.3, indicating a medium severity level due to its remote exploitability and moderate impact on confidentiality, integrity, and availability. The vendor was contacted but has not issued a patch or mitigation guidance, and public exploit code is available, increasing the risk of exploitation. The lack of vendor response and patch availability means organizations must rely on internal mitigations or temporary workarounds. The vulnerability affects a widely used CMS component, which may be embedded in various websites and applications, increasing the attack surface. Given the public availability of exploits, threat actors could automate attacks against vulnerable installations, leading to data breaches or service disruptions.

Detailed information about CVE-2025-15392: SQL Injection in Kohana KodiCMS affecting Kohana KodiCMS. Get real-time updates, technical details, and mitigation st

CVE-2025-15392: SQL Injection in Kohana KodiCMS - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-15392: SQL Injection in Kohana KodiCMS


CVE-2025-15393: Code Injection in Kohana KodiCMSCVE-2025-15393 0 A security vulnerability has been detected in Kohana KodiCMS up to 13.82.135. This impacts the function Save of the file cms/modules/kodicms/classes/kodicms/model/file.php of the component Layout API Endpoint. The manipulation of the argument content leads to code injection. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way. MediumVulnerabilityGermanyFranceUnited Kingdom+4#cve #cve-2025-15393 Join the discussion	CVE Database V5	12/31/2025, 18:32:05 UTC Added: 12/31/2025, 22:14:50 UTC
CVE-2025-15392: SQL Injection in Kohana KodiCMSCVE-2025-15392 0 A weakness has been identified in Kohana KodiCMS up to 13.82.135. This affects the function like of the file cms/modules/pages/classes/kodicms/model/page.php of the component Search API Endpoint. Executing manipulation of the argument keyword can lead to sql injection. It is possible to launch the attack remotely. The exploit has been made available to the public and could be exploited. The vendor was contacted early about this disclosure but did not respond in any way. MediumVulnerabilityGermanyFranceUnited Kingdom+5#cve #cve-2025-15392 Join the discussion	CVE Database V5	12/31/2025, 18:02:06 UTC Added: 12/31/2025, 18:28:53 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional