Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

AlienVault OTX General

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Microsoft Security Blog

Google Project Zero

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

In N2W before 4.3.2 and 4.4.x before 4.4.1, there is potential remote code execution and account credentials theft because of a spoofing vulnerability.

CVE-2025-59707 is a security vulnerability identified in the N2W software suite, specifically affecting versions prior to 4.3.2 and 4.4.x before 4.4.1. The core issue is a spoofing vulnerability that can be exploited remotely, enabling attackers to execute arbitrary code on the affected systems and steal account credentials. Spoofing in this context likely involves an attacker masquerading as a trusted entity or service component, thereby bypassing authentication or authorization controls. This can lead to unauthorized access and full system compromise. The vulnerability impacts the confidentiality of sensitive credentials, the integrity of system operations through code execution, and potentially the availability of services if exploited maliciously. Although no public exploits have been reported yet, the nature of the flaw suggests that exploitation could be straightforward, especially in environments where N2W software is exposed to untrusted networks. The lack of a CVSS score indicates that the vulnerability is newly disclosed and pending detailed assessment. However, the combination of remote code execution and credential theft elevates the threat level significantly. Organizations using affected N2W versions should anticipate the release of patches and prepare to apply them promptly. Additionally, network segmentation and monitoring for anomalous authentication or code execution attempts can help mitigate risk until patches are deployed.

Detailed information about CVE-2025-59707: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2025-59707: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-59707: n/a

In N2W before 4.3.2 and 4.4.0 before 4.4.1, improper validation of API request parameters enables remote code execution.

CVE-2025-59706 is a critical remote code execution vulnerability found in N2W software versions before 4.3.2 and 4.4.0 before 4.4.1. The root cause is improper validation of API request parameters, which allows an attacker to craft malicious API requests that the system fails to properly sanitize or verify. This flaw enables remote attackers to execute arbitrary code on the affected system, potentially leading to full system compromise. The vulnerability does not require authentication or user interaction, increasing its severity and ease of exploitation. Although no public exploits have been reported yet, the nature of the vulnerability suggests that exploitation could be straightforward once details become widely known. The absence of a CVSS score indicates that the vulnerability is newly published and pending further analysis. The affected software, N2W, is typically used in cloud environments for backup and recovery, making this vulnerability particularly concerning for cloud service providers and enterprises relying on these solutions. The improper parameter validation likely involves insufficient input sanitization or failure to enforce strict API schema validation, which attackers can leverage to inject malicious payloads. This vulnerability underscores the critical importance of robust API security controls and timely patch management.

Detailed information about CVE-2025-59706: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2025-59706: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-59706: n/a


CVE-2025-59707: n/aCVE-2025-59707 0 In N2W before 4.3.2 and 4.4.x before 4.4.1, there is potential remote code execution and account credentials theft because of a spoofing vulnerability. CriticalVulnerabilityUnited StatesGermanyUnited Kingdom+7#cve #cve-2025-59707 #gcve Join the discussion	CVE Database V5	03/25/2026, 00:00:00 UTC Added: 03/25/2026, 15:02:19 UTC
CVE-2025-59706: n/aCVE-2025-59706 0 In N2W before 4.3.2 and 4.4.0 before 4.4.1, improper validation of API request parameters enables remote code execution. CriticalVulnerabilityUnited StatesGermanyUnited Kingdom+7#cve #cve-2025-59706 #gcve Join the discussion	CVE Database V5	03/25/2026, 00:00:00 UTC Added: 03/25/2026, 15:02:19 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional