Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

nopCommerce

nopCommerce v4.70 and prior, and version 4.80.3, does not invalidate session cookies after logout or session termination, allowing an attacker who has a 
a valid session cookie access to privileged endpoints (such as /admin) even after the legitimate user has logged out, enabling session hijacking. Any version above 4.70 that is not 4.80.3 fixes the vulnerability.

CVE-2025-11699 identifies a session management vulnerability in nopSolutions' nopCommerce e-commerce platform, specifically affecting versions 4.70 and earlier, as well as version 4.80.3. The core issue is insufficient session expiration (CWE-613), where session cookies remain valid even after a user logs out or the session is terminated. This failure to invalidate session tokens allows an attacker who has acquired a valid session cookie—potentially through interception, theft, or other means—to reuse that cookie to access privileged endpoints such as the administrative interface (/admin). This effectively enables session hijacking, compromising the confidentiality and integrity of the affected system. The vulnerability does not require the attacker to have prior privileges, but user interaction is necessary to obtain a valid session cookie. The CVSS v3.1 score of 7.1 indicates a high severity due to the ease of exploitation over the network (AV:N), low attack complexity (AC:L), and significant impact on integrity (I:H) with limited impact on confidentiality (C:L) and no impact on availability (A:N). Notably, versions above 4.70 except 4.80.3 have resolved this issue, indicating a regression in 4.80.3. No public exploits have been reported yet, but the vulnerability poses a serious risk to e-commerce platforms relying on affected versions.

Detailed information about CVE-2025-11699: CWE-613 Insufficient Session Expiration in nopSolutions nopCommerce affecting nopSolutions nopCommerce. Get real-time

CVE-2025-11699: CWE-613 Insufficient Session Expiration in nopSolutions nopCommerce - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-11699: CWE-613 Insufficient Session Expiration in nopSolutions nopCommerce

Nopcommerce 4.70.1 is vulnerable to Cross Site Scripting (XSS) via the combined "AddProductReview.Title" and "AddProductReview.ReviewText" parameter(s) (Reviews) when creating a new review.

CVE-2024-38963 identifies a Cross Site Scripting (XSS) vulnerability in nopCommerce version 4.70.1, an open-source e-commerce platform widely used for online retail websites. The vulnerability specifically involves the combined handling of the AddProductReview.Title and AddProductReview.ReviewText parameters during the creation of new product reviews. These parameters are not properly sanitized or encoded, allowing an attacker to inject malicious JavaScript code. When a victim user views the affected review, the injected script executes in their browser context, potentially enabling session hijacking, cookie theft, or other malicious actions. The vulnerability requires no privileges (no authentication) but does require user interaction, such as viewing the malicious review. The CVSS 3.1 base score is 6.1 (medium), reflecting the network attack vector, low attack complexity, no privileges required, user interaction needed, and impacts on confidentiality and integrity but not availability. No patches or fixes have been officially released at the time of publication, and no known exploits have been observed in the wild. The vulnerability is classified under CWE-79, which covers improper neutralization of input during web page generation. This flaw highlights the importance of robust input validation and output encoding in web applications, especially in user-generated content features like product reviews.

Detailed information about CVE-2024-38963: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-38963: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-38963: n/a


CVE-2025-11699: CWE-613 Insufficient Session Expiration in nopSolutions nopCommerceCVE-2025-11699 0 nopCommerce v4.70 and prior, and version 4.80.3, does not invalidate session cookies after logout or session termination, allowing an attacker who has a a valid session cookie access to privileged endpoints (such as /admin) even after the legitimate user has logged out, enabling session hijacking. Any version above 4.70 that is not 4.80.3 fixes the vulnerability. HighVulnerabilityGermanyUnited KingdomFrance+5#cve #cve-2025-11699 #cwe-613 Join the discussion	CVE Database V5	12/01/2025, 15:17:57 UTC Added: 12/01/2025, 16:04:54 UTC
CVE-2024-38963: n/aCVE-2024-38963 0 Nopcommerce 4.70.1 is vulnerable to Cross Site Scripting (XSS) via the combined "AddProductReview.Title" and "AddProductReview.ReviewText" parameter(s) (Reviews) when creating a new review. MediumVulnerabilityUnited StatesGermanyUnited Kingdom+7#cve #cve-2024-38963 Join the discussion	CVE Database V5	07/09/2024, 00:00:00 UTC Added: 02/25/2026, 21:41:18 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional