Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Microsoft Security Blog

Google Project Zero

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Curfew-e-Pass-Management-System

A flaw has been found in PHPGurukul Curfew e-Pass Management System 1.0. Impacted is an unknown function of the file view-pass-detail.php. This manipulation of the argument Fullname/Category causes cross site scripting. The attack may be initiated remotely. The exploit has been published and may be used.

CVE-2025-12312 identifies a cross-site scripting (XSS) vulnerability in the PHPGurukul Curfew e-Pass Management System version 1.0. The vulnerability exists in the view-pass-detail.php file, where the Fullname and Category parameters are not properly sanitized or encoded before being reflected in the web page output. This allows an attacker to inject arbitrary JavaScript code remotely by manipulating these parameters, which is then executed in the context of the victim's browser. The attack vector is network-based (AV:N), requires low attack complexity (AC:L), no privileges (PR:H indicates high privileges required, but the CVSS vector states PR:H which is contradictory; given the description, no authentication is required, so this may be a CVSS vector inconsistency), and requires user interaction (UI:P), such as clicking a malicious link. The vulnerability impacts confidentiality and integrity by enabling theft of session cookies, credentials, or performing actions on behalf of the user. The CVSS score of 4.8 reflects a medium severity level, considering the ease of exploitation and potential impact. No patches or fixes have been linked yet, and no active exploitation has been reported, but the availability of a public exploit increases the urgency for mitigation. This vulnerability is typical of reflected XSS issues caused by insufficient input validation and output encoding in web applications handling user-supplied data.

Detailed information about CVE-2025-12312: Cross Site Scripting in PHPGurukul Curfew e-Pass Management System affecting PHPGurukul Curfew e-Pass Management Syst

CVE-2025-12312: Cross Site Scripting in PHPGurukul Curfew e-Pass Management System - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-12312: Cross Site Scripting in PHPGurukul Curfew e-Pass Management System

A vulnerability was detected in PHPGurukul Curfew e-Pass Management System 1.0. This issue affects some unknown processing of the file edit-category-detail.php. The manipulation of the argument catname results in cross site scripting. The attack can be launched remotely. The exploit is now public and may be used.

CVE-2025-12311 identifies a cross-site scripting (XSS) vulnerability in the PHPGurukul Curfew e-Pass Management System version 1.0. The vulnerability arises from insufficient sanitization or encoding of user-supplied input in the 'catname' parameter processed by the edit-category-detail.php script. An attacker can craft a malicious URL or input that injects executable JavaScript code, which is then rendered in the victim's browser when they access the affected page. This type of vulnerability allows attackers to execute arbitrary scripts in the context of the victim's session, potentially stealing cookies, session tokens, or performing actions on behalf of the user. The vulnerability is remotely exploitable without authentication, but requires user interaction to trigger the malicious payload. The CVSS 4.0 vector indicates network attack vector (AV:N), low attack complexity (AC:L), no privileges required (PR:H indicates high privileges required, but this conflicts with description and may be a data inconsistency), user interaction required (UI:P), and impacts on confidentiality and integrity but not availability. No patches or mitigations have been officially released yet, and while no active exploitation has been observed, the public availability of the exploit code increases the likelihood of future attacks. The affected product is a niche e-pass management system used to regulate movement during curfews, making it a potential target for attackers aiming to disrupt or manipulate such controls.

Detailed information about CVE-2025-12311: Cross Site Scripting in PHPGurukul Curfew e-Pass Management System affecting PHPGurukul Curfew e-Pass Management Syst

CVE-2025-12311: Cross Site Scripting in PHPGurukul Curfew e-Pass Management System - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-12311: Cross Site Scripting in PHPGurukul Curfew e-Pass Management System


CVE-2025-12312: Cross Site Scripting in PHPGurukul Curfew e-Pass Management SystemCVE-2025-12312 0 A flaw has been found in PHPGurukul Curfew e-Pass Management System 1.0. Impacted is an unknown function of the file view-pass-detail.php. This manipulation of the argument Fullname/Category causes cross site scripting. The attack may be initiated remotely. The exploit has been published and may be used. MediumVulnerabilityIndiaBangladeshPakistan+2#cve #cve-2025-12312 Join the discussion	CVE Database V5	10/27/2025, 19:32:12 UTC Added: 10/27/2025, 19:37:44 UTC
CVE-2025-12311: Cross Site Scripting in PHPGurukul Curfew e-Pass Management SystemCVE-2025-12311 0 A vulnerability was detected in PHPGurukul Curfew e-Pass Management System 1.0. This issue affects some unknown processing of the file edit-category-detail.php. The manipulation of the argument catname results in cross site scripting. The attack can be launched remotely. The exploit is now public and may be used. MediumVulnerabilityIndiaBangladeshPakistan+4#cve #cve-2025-12311 Join the discussion	CVE Database V5	10/27/2025, 19:32:08 UTC Added: 10/27/2025, 19:37:44 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional