Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

baby-care-system

A vulnerability was identified in SourceCodester Baby Care System 1.0. This affects an unknown part of the file /updatewelcome.php?id=siteoptions&action=welcome. Such manipulation of the argument roleid leads to sql injection. The attack can be launched remotely. The exploit is publicly available and might be used.

CVE-2025-12933 is a SQL injection vulnerability identified in SourceCodester Baby Care System version 1.0, specifically within the /updatewelcome.php script when handling the 'roleid' parameter. The vulnerability arises due to insufficient input validation or improper sanitization of this parameter, allowing an attacker to inject arbitrary SQL commands remotely without requiring authentication or user interaction. The injection point is in a part of the code responsible for updating site options, which likely interacts directly with the backend database. Successful exploitation can lead to unauthorized access to sensitive data, modification or deletion of database records, and potentially full compromise of the affected system. The CVSS 4.0 score of 5.3 reflects a medium severity, considering the attack vector is network-based with low complexity and no privileges or user interaction needed, but with limited impact on confidentiality, integrity, and availability. No patches or vendor advisories are currently available, and while no active exploits have been reported in the wild, publicly available exploit code increases the risk of attacks. This vulnerability is particularly concerning for organizations managing sensitive childcare data, as it could lead to exposure of personal information or disruption of critical services.

Detailed information about CVE-2025-12933: SQL Injection in SourceCodester Baby Care System affecting SourceCodester Baby Care System. Get real-time updates, te

CVE-2025-12933: SQL Injection in SourceCodester Baby Care System - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-12933: SQL Injection in SourceCodester Baby Care System

A vulnerability was determined in SourceCodester Baby Care System 1.0. Affected by this issue is some unknown functionality of the file /admin.php?id=inbox. This manipulation of the argument msgid causes sql injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized.

CVE-2025-12932 is a SQL injection vulnerability identified in SourceCodester Baby Care System version 1.0. The vulnerability exists in the /admin.php?id=inbox endpoint, where the msgid parameter is improperly sanitized, allowing an attacker to inject malicious SQL code. This flaw can be exploited remotely but requires the attacker to have high privilege authentication, indicating that only users with administrative or elevated rights can trigger the injection. The injection could allow attackers to manipulate backend SQL queries, potentially leading to unauthorized data access, modification, or deletion, though the impact on confidentiality, integrity, and availability is considered limited (low). The CVSS 4.0 vector indicates no user interaction is needed, no privileges are required to initiate the attack, but the attack requires high privileges (PR:H), and the overall score is 5.1 (medium severity). No known exploits are currently active in the wild, but the vulnerability has been publicly disclosed, increasing the risk of exploitation attempts. The lack of patches at the time of disclosure means organizations must rely on interim mitigations such as input validation and strict access controls. The vulnerability affects only version 1.0 of the Baby Care System, limiting the scope of affected systems. The system is likely used in healthcare or childcare management contexts, where data sensitivity is high, making exploitation potentially impactful despite the medium severity rating.

Detailed information about CVE-2025-12932: SQL Injection in SourceCodester Baby Care System affecting SourceCodester Baby Care System. Get real-time updates, te

CVE-2025-12932: SQL Injection in SourceCodester Baby Care System - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-12932: SQL Injection in SourceCodester Baby Care System


CVE-2025-12933: SQL Injection in SourceCodester Baby Care SystemCVE-2025-12933 0 A vulnerability was identified in SourceCodester Baby Care System 1.0. This affects an unknown part of the file /updatewelcome.php?id=siteoptions&action=welcome. Such manipulation of the argument roleid leads to sql injection. The attack can be launched remotely. The exploit is publicly available and might be used. MediumVulnerabilityGermanyFranceUnited Kingdom+3#cve #cve-2025-12933 Join the discussion	CVE Database V5	11/10/2025, 05:32:06 UTC Added: 11/10/2025, 05:39:17 UTC
CVE-2025-12932: SQL Injection in SourceCodester Baby Care SystemCVE-2025-12932 0 A vulnerability was determined in SourceCodester Baby Care System 1.0. Affected by this issue is some unknown functionality of the file /admin.php?id=inbox. This manipulation of the argument msgid causes sql injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. MediumVulnerabilityGermanyFranceUnited Kingdom+5#cve #cve-2025-12932 Join the discussion	CVE Database V5	11/10/2025, 05:02:06 UTC Added: 11/10/2025, 05:19:34 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional