Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

AlienVault OTX General

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit NetSec

Reddit Cybersecurity

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

databaseinventory

pluginsGLPI's Database Inventory Plugin "manages" the Teclib' inventory agents in order to perform an inventory of the databases present on the workstation. Prior to version 1.1.2, in certain conditions (database write access must first be obtained through another vulnerability or misconfiguration), user-controlled data is stored insecurely in the database via computergroup, and is later unserialized on every page load, allowing arbitrary PHP object instantiation. Version 1.1.2 fixes the issue.

The vulnerability identified as CVE-2025-65035 affects the pluginsGLPI Database Inventory Plugin, specifically versions prior to 1.1.2. This plugin manages Teclib's inventory agents to perform database inventories on workstations. The core issue is an unsafe deserialization flaw (CWE-502) where user-controlled data, specifically via the 'computergroup' parameter, is stored insecurely in the database. This data is later unserialized on every page load without proper validation or sanitization, enabling an attacker to instantiate arbitrary PHP objects. Such arbitrary object instantiation can lead to remote code execution, privilege escalation, or other malicious actions depending on the objects available in the application context. However, exploitation requires that the attacker first obtains database write access, which typically necessitates exploiting another vulnerability or misconfiguration. Additionally, the CVSS vector indicates that exploitation requires network access (AV:N), high attack complexity (AC:H), privileges (PR:H), and user interaction (UI:R). The impact on confidentiality, integrity, and availability is high, as arbitrary code execution can compromise the entire system. The vulnerability was reserved in November 2025 and published in December 2025, with no known exploits in the wild at the time of reporting. The issue is fixed in version 1.1.2 of the plugin, which should be applied promptly.

Detailed information about CVE-2025-65035: CWE-502: Deserialization of Untrusted Data in pluginsGLPI databaseinventory affecting pluginsGLPI databaseinventory. 

CVE-2025-65035: CWE-502: Deserialization of Untrusted Data in pluginsGLPI databaseinventory - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-65035: CWE-502: Deserialization of Untrusted Data in pluginsGLPI databaseinventory

pluginsGLPI's Database Inventory Plugin "manages" the Teclib' inventory agents in order to perform an inventory of the databases present on the workstation. In versions prior to 1.0.3, any authenticated user could send requests to agents. This issue has been patched in version 1.0.3.

The vulnerability identified as CVE-2025-53360 affects the pluginsGLPI Database Inventory Plugin, specifically versions earlier than 1.0.3. This plugin manages Teclib inventory agents that perform database inventories on workstations. Due to improper access control (CWE-284), any authenticated user—regardless of privilege level—can send requests directly to these agents. This lack of proper authorization checks enables users to potentially disrupt the inventory process or cause denial of service conditions by sending unauthorized commands or malformed requests. The vulnerability does not allow unauthorized access to sensitive data or modification of data, but it does impact the availability of the inventory service. The vulnerability is remotely exploitable over the network without user interaction and requires only low privileges (authenticated user). The CVSS 3.1 base score is 4.3, reflecting a medium severity level primarily due to the limited impact on confidentiality and integrity but with some availability impact. The issue was publicly disclosed on November 18, 2025, and has been addressed in pluginsGLPI databaseinventory plugin version 1.0.3, which implements proper access control mechanisms to restrict agent requests to authorized users only.

Detailed information about CVE-2025-53360: CWE-284: Improper Access Control in pluginsGLPI databaseinventory affecting pluginsGLPI databaseinventory. Get real-t

CVE-2025-53360: CWE-284: Improper Access Control in pluginsGLPI databaseinventory - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-53360: CWE-284: Improper Access Control in pluginsGLPI databaseinventory


CVE-2025-65035: CWE-502: Deserialization of Untrusted Data in pluginsGLPI databaseinventoryCVE-2025-65035 0 pluginsGLPI's Database Inventory Plugin "manages" the Teclib' inventory agents in order to perform an inventory of the databases present on the workstation. Prior to version 1.1.2, in certain conditions (database write access must first be obtained through another vulnerability or misconfiguration), user-controlled data is stored insecurely in the database via computergroup, and is later unserialized on every page load, allowing arbitrary PHP object instantiation. Version 1.1.2 fixes the issue. MediumVulnerabilityFranceGermanyUnited Kingdom+4#cve #cve-2025-65035 #cwe-502 Join the discussion	CVE Database V5	12/19/2025, 16:35:56 UTC Added: 12/19/2025, 16:42:44 UTC
CVE-2025-53360: CWE-284: Improper Access Control in pluginsGLPI databaseinventoryCVE-2025-53360 0 pluginsGLPI's Database Inventory Plugin "manages" the Teclib' inventory agents in order to perform an inventory of the databases present on the workstation. In versions prior to 1.0.3, any authenticated user could send requests to agents. This issue has been patched in version 1.0.3. MediumVulnerabilityFranceGermanyUnited Kingdom+4#cve #cve-2025-53360 #cwe-284 Join the discussion	CVE Database V5	11/18/2025, 16:12:15 UTC Added: 11/18/2025, 16:17:56 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional