Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

GCP Compute Engine Security

JVN Japan

AWS Security Bulletins

GCP Kubernetes Security

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

InventoryGui

InventoryGui is a library for creating chest GUIs for Bukkit/Spigot plugins. Versions before 1.6.5 contain a vulnerability where any plugin using a GUI with the GuiStorageElement and allows taking out items out of that element can allow item duplication when the experimental Bundle item feature is enabled on the server. The vulnerability is resolved in version 1.6.5.

CVE-2025-62784 is a vulnerability classified under CWE-837 (Improper Enforcement of a Single, Unique Action) found in the InventoryGui library versions prior to 1.6.5. InventoryGui is a popular library used by Bukkit/Spigot plugins to create chest-based graphical user interfaces (GUIs) within Minecraft servers. The vulnerability specifically occurs when a plugin uses the GuiStorageElement component that permits players to take items out of the GUI element, combined with the server enabling the experimental Bundle item feature. This combination allows an attacker with low privileges (no authentication beyond normal player access) to duplicate items by exploiting improper enforcement of unique actions within the GUI logic. The duplication flaw impacts data integrity by allowing unauthorized replication of in-game items, which can disrupt game economy and fairness. The vulnerability does not require user interaction and can be exploited remotely over the network. The CVSS 4.0 score of 5.3 reflects a medium severity, considering the ease of exploitation and limited scope of impact (integrity only). No known exploits have been reported in the wild as of the publication date. The issue is resolved in InventoryGui version 1.6.5, which enforces proper single-action constraints to prevent duplication. Server administrators are advised to upgrade to this version or disable the experimental Bundle feature to mitigate risk.

Detailed information about CVE-2025-62784: CWE-837: Improper Enforcement of a Single, Unique Action in Phoenix616 InventoryGui affecting Phoenix616 InventoryGui

CVE-2025-62784: CWE-837: Improper Enforcement of a Single, Unique Action in Phoenix616 InventoryGui - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-62784: CWE-837: Improper Enforcement of a Single, Unique Action in Phoenix616 InventoryGui

InventoryGui is a library for creating chest GUIs for Bukkit/Spigot plugins. Versions 1.6.3-SNAPSHOT and earlier contain a vulnerability where GUIs using GuiStorageElement can allow item duplication when the experimental Bundle item feature is enabled on the server. The vulnerability is resolved in version 1.6.4-SNAPSHOT.

The vulnerability identified as CVE-2025-62782 affects the Phoenix616 InventoryGui library, a tool widely used in Bukkit/Spigot Minecraft server plugins to create chest graphical user interfaces (GUIs). Specifically, versions 1.6.3-SNAPSHOT and earlier contain a flaw classified under CWE-837 (Improper Enforcement of a Single, Unique Action). This flaw arises when GUIs utilize the GuiStorageElement component in conjunction with the experimental Bundle item feature enabled on the server. The vulnerability allows attackers or users with limited privileges to duplicate items within the game environment by bypassing the intended single-action enforcement mechanism. This duplication occurs because the system fails to properly restrict repeated execution of the same action, leading to multiple instances of items being created illegitimately. The impact primarily affects the integrity of the game state, as duplicated items can disrupt in-game economies, cause unfair advantages, and potentially destabilize server operations. Exploitation requires some user interaction and low privileges, making it accessible to regular players rather than only administrators. The vulnerability does not affect confidentiality or availability directly but poses a significant risk to game integrity and fairness. The issue was addressed and resolved in version 1.6.4-SNAPSHOT of InventoryGui. No known exploits have been reported in the wild as of the publication date, but the medium CVSS score of 5.9 reflects the moderate risk posed by this vulnerability.

Detailed information about CVE-2025-62782: CWE-837: Improper Enforcement of a Single, Unique Action in Phoenix616 InventoryGui affecting Phoenix616 InventoryGui

CVE-2025-62782: CWE-837: Improper Enforcement of a Single, Unique Action in Phoenix616 InventoryGui - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-62782: CWE-837: Improper Enforcement of a Single, Unique Action in Phoenix616 InventoryGui


CVE-2025-62784: CWE-837: Improper Enforcement of a Single, Unique Action in Phoenix616 InventoryGuiCVE-2025-62784 0 InventoryGui is a library for creating chest GUIs for Bukkit/Spigot plugins. Versions before 1.6.5 contain a vulnerability where any plugin using a GUI with the GuiStorageElement and allows taking out items out of that element can allow item duplication when the experimental Bundle item feature is enabled on the server. The vulnerability is resolved in version 1.6.5. MediumVulnerabilityGermanyUnited KingdomFrance+3#cve #cve-2025-62784 #cwe-837 Join the discussion	CVE Database V5	10/27/2025, 20:59:22 UTC Added: 10/27/2025, 21:08:01 UTC
CVE-2025-62782: CWE-837: Improper Enforcement of a Single, Unique Action in Phoenix616 InventoryGuiCVE-2025-62782 0 InventoryGui is a library for creating chest GUIs for Bukkit/Spigot plugins. Versions 1.6.3-SNAPSHOT and earlier contain a vulnerability where GUIs using GuiStorageElement can allow item duplication when the experimental Bundle item feature is enabled on the server. The vulnerability is resolved in version 1.6.4-SNAPSHOT. MediumVulnerabilityGermanyUnited KingdomFrance+3#cve #cve-2025-62782 #cwe-837 Join the discussion	CVE Database V5	10/27/2025, 20:50:07 UTC Added: 10/27/2025, 20:53:54 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional