Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

GCP Compute Engine Security

JVN Japan

AWS Security Bulletins

GCP Kubernetes Security

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

SoftEtherVPN

SoftEther VPN 5.02.5187 is vulnerable to Buffer Overflow in the Command.c file via the PtMakeCert and PtMakeCert2048 functions. NOTE: the Supplier disputes this because the behavior only allows a user to attack himself by typing a long string on a command line.

CVE-2025-25565 is a critical buffer overflow vulnerability identified in SoftEther VPN version 5.02.5187, specifically within the Command.c source file. The vulnerability arises in the PtMakeCert and PtMakeCert2048 functions, which are responsible for certificate generation. A buffer overflow occurs when these functions improperly handle input strings, allowing an attacker to overwrite memory beyond the allocated buffer. This can lead to arbitrary code execution, denial of service, or system compromise. The CVSS 3.1 base score is 9.8, indicating a critical severity with network attack vector (AV:N), low attack complexity (AC:L), no privileges required (PR:N), no user interaction (UI:N), unchanged scope (S:U), and high impact on confidentiality, integrity, and availability (C:H/I:H/A:H). However, the supplier disputes the vulnerability's practical exploitability, arguing that the vulnerable code path only permits a user to attack themselves by entering a long string on a command line, implying that remote exploitation or exploitation by other users is not feasible. Despite this, the vulnerability remains critical due to the potential for local exploitation without authentication or user interaction. SoftEther VPN is an open-source, multi-protocol VPN solution widely used for secure remote access. The affected functions relate to certificate creation, a sensitive operation that, if exploited, could undermine the VPN's security guarantees. No patches or fixes are currently linked, and no known exploits are reported in the wild. The vulnerability is classified under CWE-120 (Classic Buffer Overflow), a common and dangerous software weakness. Given the nature of the vulnerability and the critical CVSS score, organizations using SoftEther VPN 5.02.5187 should consider this a serious risk, especially if the software is exposed to untrusted users or environments where local users might attempt exploitation.

Detailed information about CVE-2025-25565: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2025-25565: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-25565: n/a

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional