Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Online-Admission-System

A flaw has been found in SourceCodester Online Admission System 1.0. This affects an unknown function of the file /programmes.php. Executing a manipulation of the argument program can lead to sql injection. The attack can be launched remotely. The exploit has been published and may be used.

CVE-2026-4625 is a SQL injection vulnerability identified in SourceCodester Online Admission System version 1.0. The vulnerability resides in an unspecified function within the /programmes.php file, where the 'program' parameter is improperly sanitized, allowing an attacker to inject malicious SQL code. This injection flaw can be exploited remotely without any authentication or user interaction, making it highly accessible to attackers. The vulnerability has a CVSS 4.0 base score of 6.9, categorized as medium severity, reflecting its potential to compromise the confidentiality, integrity, and availability of the backend database. Exploiting this vulnerability could allow attackers to retrieve sensitive student admission data, modify records, or disrupt the admission process. Although no active exploitation has been reported, the public availability of exploit code increases the likelihood of attacks. The absence of official patches or mitigations from the vendor necessitates immediate defensive measures by users of the affected software. Given the critical nature of admission systems in educational institutions, this vulnerability poses a significant risk to data privacy and operational continuity.

Detailed information about CVE-2026-4625: SQL Injection in SourceCodester Online Admission System affecting SourceCodester Online Admission System. Get real-tim

CVE-2026-4625: SQL Injection in SourceCodester Online Admission System - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-4625: SQL Injection in SourceCodester Online Admission System

A vulnerability was identified in projectworlds Online Admission System 1.0. Affected by this vulnerability is an unknown functionality of the file /process_login.php. The manipulation of the argument keywords leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and might be used.

CVE-2025-12938 identifies a SQL injection vulnerability in the projectworlds Online Admission System version 1.0, specifically within the /process_login.php script. The vulnerability is triggered by manipulation of the 'keywords' argument, which is not properly sanitized before being used in SQL queries. This allows an unauthenticated remote attacker to inject arbitrary SQL commands, potentially leading to unauthorized access to the backend database, data leakage, data modification, or disruption of service. The vulnerability does not require any user interaction or privileges, making it easier to exploit. The CVSS 4.0 score of 6.9 reflects a medium severity, with attack vector being network-based, low attack complexity, and no authentication required. The vulnerability affects a specific, possibly niche, product used for online admission processes, which may be deployed in educational institutions. Although no active exploitation has been reported, a public exploit is available, increasing the risk of attacks. The lack of official patches or updates at the time of publication means organizations must apply mitigations or workarounds to protect their systems.

Detailed information about CVE-2025-12938: SQL Injection in projectworlds Online Admission System affecting projectworlds Online Admission System. Get real-time

CVE-2025-12938: SQL Injection in projectworlds Online Admission System - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-12938: SQL Injection in projectworlds Online Admission System


CVE-2026-4625: SQL Injection in SourceCodester Online Admission SystemCVE-2026-4625 0 A flaw has been found in SourceCodester Online Admission System 1.0. This affects an unknown function of the file /programmes.php. Executing a manipulation of the argument program can lead to sql injection. The attack can be launched remotely. The exploit has been published and may be used. MediumVulnerabilityUnited StatesIndiaPhilippines+7#cve #cve-2026-4625 Join the discussion	CVE Database V5	03/24/2026, 02:46:11 UTC Added: 03/24/2026, 03:30:52 UTC
CVE-2025-12938: SQL Injection in projectworlds Online Admission SystemCVE-2025-12938 0 A vulnerability was identified in projectworlds Online Admission System 1.0. Affected by this vulnerability is an unknown functionality of the file /process_login.php. The manipulation of the argument keywords leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and might be used. MediumVulnerabilityIndiaUnited StatesUnited Kingdom+7#cve #cve-2025-12938 Join the discussion	CVE Database V5	11/10/2025, 12:02:05 UTC Added: 11/10/2025, 12:35:39 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional