Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

AlienVault OTX General

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit NetSec

Reddit Cybersecurity

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

tileserver-php

MapTiler Tileserver-php v2.0 is vulnerable to Directory Traversal. The renderTile function within tileserver.php is responsible for delivering tiles that are stored as files on the server via web request. Creating the path to a file allows the insertion of "../" and thus read any file on the web server. Affected GET parameters are "TileMatrix", "TileRow", "TileCol" and "Format"

CVE-2025-44137 is a directory traversal vulnerability identified in MapTiler Tileserver-php version 2.0. The vulnerability resides in the renderTile function within the tileserver.php file, which is responsible for delivering map tiles stored as files on the server in response to web requests. The function constructs file paths based on user-supplied GET parameters: TileMatrix, TileRow, TileCol, and Format. Due to insufficient input validation, an attacker can inject directory traversal sequences such as '../' into these parameters, enabling them to access files outside the intended tile directories. This flaw allows unauthorized reading of arbitrary files on the web server, potentially exposing sensitive configuration files, credentials, or other critical data. The vulnerability requires no authentication or user interaction and can be exploited remotely over the network. The CVSS 3.1 base score of 8.2 reflects the vulnerability's high impact on confidentiality and integrity, with no impact on availability. Although no known exploits are reported in the wild yet, the ease of exploitation and the sensitive nature of data accessible through this flaw make it a significant threat. The vulnerability is categorized under CWE-22 (Improper Limitation of a Pathname to a Restricted Directory). No official patches or fixes are currently listed, emphasizing the need for immediate mitigation efforts by affected users.

Detailed information about CVE-2025-44137: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2025-44137: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-44137: n/a

MapTiler Tileserver-php v2.0 is vulnerable to Cross Site Scripting (XSS). The GET parameter "layer" is reflected in an error message without html encoding. This leads to XSS and allows an unauthenticated attacker to execute arbitrary HTML or JavaScript code on a victim's browser.

CVE-2025-44136 is a Cross Site Scripting (XSS) vulnerability identified in MapTiler Tileserver-php version 2.0. The vulnerability arises because the GET parameter "layer" is reflected in an error message without proper HTML encoding or sanitization. This improper handling allows an unauthenticated attacker to inject arbitrary HTML or JavaScript code into the response sent to the victim's browser. When a victim accesses a crafted URL containing malicious script code in the "layer" parameter, the script executes in the context of the victim's browser session. This can lead to a range of attacks including session hijacking, credential theft, defacement, or redirection to malicious sites. The vulnerability is client-side but can be triggered without authentication, increasing the attack surface. Although no known exploits are currently reported in the wild, the vulnerability is publicly disclosed and can be weaponized by attackers. The lack of a CVSS score suggests the need for an independent severity assessment based on the vulnerability's characteristics. The affected product, MapTiler Tileserver-php, is a PHP-based tile server used to serve map tiles for web mapping applications, often integrated into geospatial services and location-based applications. The vulnerability specifically targets the error handling mechanism where user input is reflected unsafely, a common vector for reflected XSS attacks.

Detailed information about CVE-2025-44136: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2025-44136: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-44136: n/a


CVE-2025-44137: n/aCVE-2025-44137 0 MapTiler Tileserver-php v2.0 is vulnerable to Directory Traversal. The renderTile function within tileserver.php is responsible for delivering tiles that are stored as files on the server via web request. Creating the path to a file allows the insertion of "../" and thus read any file on the web server. Affected GET parameters are "TileMatrix", "TileRow", "TileCol" and "Format" HighVulnerabilityGermanyFranceUnited Kingdom+5#cve #cve-2025-44137 Join the discussion	CVE Database V5	07/29/2025, 00:00:00 UTC Added: 07/29/2025, 17:17:43 UTC
CVE-2025-44136: n/aCVE-2025-44136 0 MapTiler Tileserver-php v2.0 is vulnerable to Cross Site Scripting (XSS). The GET parameter "layer" is reflected in an error message without html encoding. This leads to XSS and allows an unauthenticated attacker to execute arbitrary HTML or JavaScript code on a victim's browser. CriticalVulnerabilityGermanyFranceUnited Kingdom+7#cve #cve-2025-44136 Join the discussion	CVE Database V5	07/29/2025, 00:00:00 UTC Added: 07/29/2025, 17:02:44 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional