Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

GCP Compute Engine Security

JVN Japan

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Primakon

Primakon Pi Portal 1.0.18 /api/v2/pp_users endpoint fails to adequately check user permissions before processing a PATCH request to modify the PP_SECURITY_PROFILE_ID. Because of weak access controls any low level user can use this API and change their permission to Administrator by using PP_SECURITY_PROFILE_ID=2 inside body of request and escalate privileges.

CVE-2025-64064 is a critical access control vulnerability identified in Primakon Pi Portal version 1.0.18, specifically affecting the /api/v2/pp_users REST API endpoint. The vulnerability arises because the endpoint fails to adequately verify user permissions before processing PATCH requests that modify the PP_SECURITY_PROFILE_ID attribute, which controls user privilege levels. An attacker with any authenticated low-level user account can exploit this flaw by crafting a PATCH request with PP_SECURITY_PROFILE_ID set to 2, which corresponds to Administrator privileges. This results in unauthorized privilege escalation, granting the attacker full administrative control over the portal. The vulnerability is classified under CWE-284 (Improper Access Control) and has a CVSS v3.1 base score of 8.8, indicating a high-severity issue with network attack vector, low attack complexity, and no user interaction required. The impact includes full compromise of confidentiality, integrity, and availability of the affected system. Although no public exploits have been reported yet, the straightforward exploitation method and the critical nature of the flaw make it a significant risk. The vulnerability affects all deployments running the vulnerable version of Primakon Pi Portal, and no official patches were listed at the time of publication, necessitating immediate compensating controls.

Detailed information about CVE-2025-64064: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2025-64064: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-64064: n/a

The Primakon Pi Portal 1.0.18 /api/V2/pp_users?email endpoint is used for user data filtering but lacks proper server-side validation against the authenticated session. By manipulating the email parameter to an arbitrary value (e.g., otheruser@user.com), an attacker can assume the session and gain full access to the target user's data and privileges. Also, if the email parameter is left blank, the application defaults to the first user in the list, who is typically the application administrator, resulting in an immediate Privilege Escalation to the highest level.

CVE-2025-64062 is a critical authentication and authorization bypass vulnerability found in Primakon Pi Portal version 1.0.18, specifically in the /api/V2/pp_users?email REST API endpoint. This endpoint is designed to filter user data based on the email parameter but lacks proper server-side validation to ensure that the email parameter corresponds to the authenticated user's session. An attacker can exploit this by manipulating the email parameter to an arbitrary value, such as another user's email address, effectively assuming that user's session and gaining full access to their data and privileges. More critically, if the email parameter is omitted or left blank, the application defaults to returning data for the first user in the system's user list, who is typically the application administrator. This results in an immediate privilege escalation, granting the attacker the highest level of access without needing to authenticate as the administrator. The vulnerability is classified under CWE-285 (Improper Authorization) and has a CVSS v3.1 base score of 8.8, indicating high severity. The attack vector is network-based (AV:N), requires low attack complexity (AC:L), and only requires privileges of a normal user (PR:L) without user interaction (UI:N). The impact on confidentiality, integrity, and availability is high (C:H/I:H/A:H) because the attacker can fully compromise user data and administrative functions. No patches or mitigations are currently listed, and no known exploits have been reported in the wild as of the publication date. This vulnerability poses a significant risk to any organization using the affected version of Primakon Pi Portal, especially where sensitive or critical data and administrative controls are involved.

Detailed information about CVE-2025-64062: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2025-64062: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-64062: n/a


CVE-2025-64064: n/aCVE-2025-64064 0 Primakon Pi Portal 1.0.18 /api/v2/pp_users endpoint fails to adequately check user permissions before processing a PATCH request to modify the PP_SECURITY_PROFILE_ID. Because of weak access controls any low level user can use this API and change their permission to Administrator by using PP_SECURITY_PROFILE_ID=2 inside body of request and escalate privileges. HighVulnerabilityGermanyFranceUnited Kingdom+7#cve #cve-2025-64064 Join the discussion	CVE Database V5	11/25/2025, 00:00:00 UTC Added: 11/25/2025, 18:36:55 UTC
CVE-2025-64062: n/aCVE-2025-64062 0 The Primakon Pi Portal 1.0.18 /api/V2/pp_users?email endpoint is used for user data filtering but lacks proper server-side validation against the authenticated session. By manipulating the email parameter to an arbitrary value (e.g., [email protected]), an attacker can assume the session and gain full access to the target user's data and privileges. Also, if the email parameter is left blank, the application defaults to the first user in the list, who is typically the application administrator, resulting in an immediate Privilege Escalation to the highest level. HighVulnerabilityGermanyFranceUnited Kingdom+3#cve #cve-2025-64062 Join the discussion	CVE Database V5	11/25/2025, 00:00:00 UTC Added: 11/25/2025, 18:22:23 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional