Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

webtareas

WebTareas 2.4 contains a SQL injection vulnerability in the webTareasSID cookie parameter that allows unauthenticated attackers to manipulate database queries. Attackers can exploit error-based and time-based blind SQL injection techniques to extract database information and potentially access sensitive system data.

CVE-2023-53972 identifies a critical SQL injection vulnerability in the WebTareas 2.4 application developed by luiswang. The flaw exists in the handling of the webTareasSID cookie parameter, where improper neutralization of special elements in SQL commands allows an attacker to inject malicious SQL code. This vulnerability can be exploited without any authentication or user interaction, making it highly accessible to remote attackers. The attack techniques include error-based and time-based blind SQL injection, enabling attackers to enumerate database structure, extract sensitive information, and potentially manipulate backend data. The vulnerability impacts confidentiality and integrity by exposing sensitive system data and possibly allowing unauthorized data modification. The CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N) reflects network attack vector, low complexity, no privileges or user interaction required, and high impact on confidentiality and integrity. Although no public exploits are currently known, the critical severity and ease of exploitation make this a significant threat. The absence of vendor patches at the time of publication increases the urgency for defensive measures. Organizations using WebTareas 2.4 should prioritize vulnerability assessment and mitigation to prevent exploitation.

Detailed information about CVE-2023-53972: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in luiswang WebTareas affecting 

CVE-2023-53972: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in luiswang WebTareas - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2023-53972: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in luiswang WebTareas

WebTareas 2.4 contains a file upload vulnerability that allows authenticated users to upload malicious PHP files through the chat photo upload functionality. Attackers can upload a PHP file with arbitrary code to the /files/Messages/ directory and execute it directly through the generated file path.

CVE-2023-53971 is a file upload vulnerability found in version 2.4 of the WebTareas software developed by luiswang. The flaw resides in the chat photo upload functionality, which does not properly restrict the types of files that authenticated users can upload. This lack of validation allows attackers to upload PHP files containing arbitrary code to the /files/Messages/ directory. Once uploaded, these files can be accessed and executed directly via their generated file paths, effectively enabling remote code execution (RCE) on the server hosting WebTareas. The vulnerability requires the attacker to have valid user credentials, but no further user interaction is necessary. The CVSS 4.0 vector indicates network attack vector (AV:N), low attack complexity (AC:L), no privileges required beyond authentication (PR:L), no user interaction (UI:N), and high impact on confidentiality, integrity, and availability (VC:H/VI:H/VA:H). This combination makes the vulnerability highly dangerous, as it can lead to full system compromise, data theft, or service disruption. Although no known exploits are publicly reported, the vulnerability's characteristics make it a prime target for attackers once discovered. The absence of patches at the time of publication increases the urgency for organizations to implement mitigations.

Detailed information about CVE-2023-53971: Unrestricted Upload of File with Dangerous Type in luiswang WebTareas affecting luiswang WebTareas. Get real-time upd

CVE-2023-53971: Unrestricted Upload of File with Dangerous Type in luiswang WebTareas - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2023-53971: Unrestricted Upload of File with Dangerous Type in luiswang WebTareas


CVE-2023-53972: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in luiswang WebTareasCVE-2023-53972 0 WebTareas 2.4 contains a SQL injection vulnerability in the webTareasSID cookie parameter that allows unauthenticated attackers to manipulate database queries. Attackers can exploit error-based and time-based blind SQL injection techniques to extract database information and potentially access sensitive system data. CriticalVulnerabilityGermanyFranceUnited Kingdom+7#cve #cve-2023-53972 Join the discussion	CVE Database V5	12/22/2025, 21:35:32 UTC Added: 12/22/2025, 21:59:19 UTC
CVE-2023-53971: Unrestricted Upload of File with Dangerous Type in luiswang WebTareasCVE-2023-53971 0 WebTareas 2.4 contains a file upload vulnerability that allows authenticated users to upload malicious PHP files through the chat photo upload functionality. Attackers can upload a PHP file with arbitrary code to the /files/Messages/ directory and execute it directly through the generated file path. HighVulnerabilityGermanyFranceUnited Kingdom+7#cve #cve-2023-53971 Join the discussion	CVE Database V5	12/22/2025, 21:35:32 UTC Added: 12/22/2025, 21:59:19 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional