Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Zero Day Initiative

Cisco Talos

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

deck

Nextcloud Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud. Prior to 1.14.6 and 1.15.2, a bug in the permission logic allowed users with "Can share" permission to modify the permissions of other recipients. This vulnerability is fixed in 1.14.6 and 1.15.2.

CVE-2025-66557 is an improper access control vulnerability (CWE-284) identified in Nextcloud Deck, a kanban-style project and personal planning tool integrated with Nextcloud. The flaw exists in the permission logic of versions prior to 1.14.6 and between 1.15.0-beta.1 and 1.15.2, where users granted the "Can share" permission can improperly modify the permissions of other recipients. This means that a user who should only be able to share boards or tasks can escalate their privileges by changing access rights of other users, potentially granting themselves or others higher privileges than intended. The vulnerability affects the integrity and availability of the system by allowing unauthorized permission changes that could disrupt workflows or enable further unauthorized actions. The CVSS 3.1 base score is 5.4 (medium), reflecting network exploitability with low complexity and no user interaction required, but requiring some privileges (PR:L). No confidentiality impact is noted. The issue was publicly disclosed on December 5, 2025, with fixes released in versions 1.14.6 and 1.15.2. No known exploits have been reported in the wild. This vulnerability highlights the importance of strict access control enforcement in collaborative tools to prevent privilege escalation and unauthorized modifications.

Detailed information about CVE-2025-66557: CWE-284: Improper Access Control in nextcloud security-advisories affecting nextcloud security-advisories. Get real-t

CVE-2025-66557: CWE-284: Improper Access Control in nextcloud security-advisories - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-66557: CWE-284: Improper Access Control in nextcloud security-advisories

Nextcloud Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud. Prior to 1.12.7, 1.14.4, and 1.15.1, file extension can be spoofed by using RTLO characters, tricking users into download files with a different extension than what is displayed. This vulnerability is fixed in 1.12.7, 1.14.4, and 1.15.1.

CVE-2025-66548 is a vulnerability classified under CWE-116 (Improper Encoding or Escaping of Output) found in Nextcloud Deck, a kanban-style organizational tool integrated with the Nextcloud platform. The vulnerability arises from the improper handling of file names containing Right-to-Left Override (RTLO) Unicode characters. RTLO characters can reverse the display order of characters in file names, enabling an attacker to spoof the file extension shown to the user. For example, a malicious file named 'docx‮exe' could appear as 'exe.docx' in the user interface, misleading users about the true file type. This spoofing can facilitate social engineering attacks by tricking users into opening potentially harmful files they believe to be safe. The vulnerability affects Nextcloud Deck versions prior to 1.12.7, 1.14.4, and 1.15.1. Exploitation requires local access with low privileges and does not require user interaction, but the attacker must be able to upload or place files within the Nextcloud environment. The CVSS v3.1 base score is 3.3, indicating low severity, with the vector showing local attack vector, low complexity, low privileges required, no user interaction, and impact limited to integrity only. No known exploits have been reported in the wild. The vulnerability was publicly disclosed on December 5, 2025, and patches are available in the specified versions. The root cause is the failure to properly encode or escape output filenames containing RTLO characters, allowing the visual spoofing of file extensions in the Nextcloud Deck interface.

Detailed information about CVE-2025-66548: CWE-116: Improper Encoding or Escaping of Output in nextcloud security-advisories affecting nextcloud security-adviso

CVE-2025-66548: CWE-116: Improper Encoding or Escaping of Output in nextcloud security-advisories - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-66548: CWE-116: Improper Encoding or Escaping of Output in nextcloud security-advisories


CVE-2025-66557: CWE-284: Improper Access Control in nextcloud security-advisoriesCVE-2025-66557 0 Nextcloud Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud. Prior to 1.14.6 and 1.15.2, a bug in the permission logic allowed users with "Can share" permission to modify the permissions of other recipients. This vulnerability is fixed in 1.14.6 and 1.15.2. MediumVulnerabilityGermanyFranceUnited Kingdom+7#cve #cve-2025-66557 #cwe-284 Join the discussion	CVE Database V5	12/05/2025, 17:28:48 UTC Added: 12/05/2025, 17:45:22 UTC
CVE-2025-66548: CWE-116: Improper Encoding or Escaping of Output in nextcloud security-advisoriesCVE-2025-66548 0 Nextcloud Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud. Prior to 1.12.7, 1.14.4, and 1.15.1, file extension can be spoofed by using RTLO characters, tricking users into download files with a different extension than what is displayed. This vulnerability is fixed in 1.12.7, 1.14.4, and 1.15.1. LowVulnerabilityGermanyFranceNetherlands+3#cve #cve-2025-66548 #cwe-116 Join the discussion	CVE Database V5	12/05/2025, 17:26:11 UTC Added: 12/05/2025, 17:45:22 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional