Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

sistick

Stored Cross-Site Scripting (XSS) in Sergestec's Exito v8.0, consisting of a stored XSS due to a lack of proper validation of user input by sending a POST request using the 'obs' parameter in '/admin/index.php?action=product_update'. This vulnerability could allow a remote user to send a specially crafted query to an authenticated user and steal their cookie session details.

CVE-2025-41021 is a medium-severity stored Cross-Site Scripting (XSS) vulnerability identified in Sergestec's SISTICK product, specifically affecting Exito version 7.2. The vulnerability stems from improper neutralization of user input during web page generation, classified under CWE-79. The issue occurs in the /admin/index.php?action=product_update endpoint, where the 'obs' parameter is not properly validated or sanitized when received via a POST request. This allows an authenticated attacker to inject malicious JavaScript code that gets stored on the server and subsequently executed in the browsers of other authenticated users who access the affected page. Exploitation does not require elevated privileges beyond authentication, but does require user interaction (the victim must visit the affected page). The impact includes theft of session cookies, which can lead to session hijacking, unauthorized actions, and potential compromise of sensitive data within the application. The CVSS 4.0 vector indicates network attack vector (AV:N), low attack complexity (AC:L), no privileges required (PR:L), user interaction required (UI:P), and limited scope and impact on confidentiality, integrity, and availability. No patches have been published yet, and no known exploits are currently in the wild. The vulnerability was reserved in April 2025 and published in October 2025 by INCIBE, highlighting its recent discovery. Given the nature of stored XSS, the risk is significant in environments where multiple users have administrative or privileged access to the affected system.

Detailed information about CVE-2025-41021: CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') in Sergestec SISTI

CVE-2025-41021: CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') in Sergestec SISTICK - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-41021: CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') in Sergestec SISTICK

SQL injection in Sergestec's SISTICK v7.2. This vulnerability allows an attacker to retrieve, create, update, and delete databases through the 'id' parameter in '/index.php?view=ticket_detail'.

CVE-2025-41019 is a critical SQL injection vulnerability identified in Sergestec's SISTICK software, specifically version 7.2. The vulnerability stems from improper neutralization of special characters in the 'id' parameter within the '/index.php?view=ticket_detail' endpoint. This allows attackers to inject malicious SQL commands directly into the backend database queries without requiring authentication or user interaction. Exploitation can lead to unauthorized retrieval, creation, modification, or deletion of database records, severely compromising data confidentiality, integrity, and availability. The CVSS 4.0 score of 9.3 reflects the vulnerability's high severity, with network attack vector, low complexity, no privileges required, and no user interaction needed. The vulnerability affects the core data handling of SISTICK, a product used for ticket management, which may contain sensitive operational or customer data. Although no public exploits have been reported yet, the vulnerability's characteristics make it a prime target for attackers aiming to gain persistent access or disrupt services. The lack of available patches at the time of publication necessitates immediate mitigation efforts. The vulnerability was reserved in April 2025 and published in October 2025 by INCIBE, indicating coordinated disclosure. Given the critical nature of SQL injection flaws, organizations must assess their exposure and implement robust input validation, use prepared statements or parameterized queries, and enforce least privilege on database accounts to mitigate potential exploitation.

Detailed information about CVE-2025-41019: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in Sergestec SISTICK affe

CVE-2025-41019: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in Sergestec SISTICK - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-41019: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in Sergestec SISTICK


CVE-2025-41021: CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') in Sergestec SISTICKCVE-2025-41021 0 Stored Cross-Site Scripting (XSS) in Sergestec's Exito v8.0, consisting of a stored XSS due to a lack of proper validation of user input by sending a POST request using the 'obs' parameter in '/admin/index.php?action=product_update'. This vulnerability could allow a remote user to send a specially crafted query to an authenticated user and steal their cookie session details. MediumVulnerabilityFranceGermanyItaly+4#cve #cve-2025-41021 #cwe-79 Join the discussion	CVE Database V5	10/16/2025, 08:00:39 UTC Added: 10/16/2025, 09:04:09 UTC
CVE-2025-41019: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in Sergestec SISTICKCVE-2025-41019 0 SQL injection in Sergestec's SISTICK v7.2. This vulnerability allows an attacker to retrieve, create, update, and delete databases through the 'id' parameter in '/index.php?view=ticket_detail'. CriticalVulnerabilityFranceGermanySpain+3#cve #cve-2025-41019 #cwe-89 Join the discussion	CVE Database V5	10/16/2025, 07:56:47 UTC Added: 10/16/2025, 09:04:08 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional