Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

synology-router-manager

A vulnerability in portenable cgi allows remote authenticated users to get the status of installed packages.

CVE-2025-29846 is a path traversal vulnerability identified in Synology Router Manager (SRM) version 1.3, specifically within the portenable.cgi interface. The flaw arises from improper limitation of pathname inputs, allowing remote authenticated users to circumvent directory restrictions and retrieve the status of installed packages. This vulnerability is exploitable over the network (AV:N) with low attack complexity (AC:L), but requires high-level privileges (PR:H) and no user interaction (UI:N). The scope is unchanged (S:U), but the impact is high across confidentiality, integrity, and availability (C:H/I:H/A:H). By exploiting this vulnerability, an attacker could gain unauthorized insight into installed packages, potentially leading to further exploitation or lateral movement within the network. Although no public exploits are currently known, the vulnerability's nature and impact warrant immediate attention. The vulnerability was reserved in March 2025 and published in December 2025, indicating recent discovery and disclosure. Synology SRM is widely used in small to medium enterprise and home network environments, making this a significant risk for affected users.

Detailed information about CVE-2025-29846: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Synology Synology Router Manager (S

CVE-2025-29846: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Synology Synology Router Manager (SRM) - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-29846: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Synology Synology Router Manager (SRM)

A vulnerability in VideoPlayer2 subtitle cgi allows remote authenticated users to read .srt files.

CVE-2025-29845 is a path traversal vulnerability identified in Synology Router Manager (SRM) version 1.3, specifically affecting the VideoPlayer2 subtitle CGI interface. This flaw allows remote authenticated users to bypass intended directory restrictions and read arbitrary .srt subtitle files stored on the device. The vulnerability arises from improper limitation of pathname inputs, enabling traversal outside the restricted directory. Since the attack requires authentication but no user interaction, an attacker with valid credentials can exploit this remotely over the network. The vulnerability impacts confidentiality by exposing potentially sensitive subtitle files, which may contain metadata or information useful for further attacks or reconnaissance. However, it does not affect the integrity or availability of the system. The CVSS v3.1 base score is 4.3 (medium), reflecting the limited scope and impact. No patches or known exploits are currently reported, but the presence of this vulnerability in a widely used router management system underscores the need for vigilance. The issue is particularly relevant for environments where SRM 1.3 is deployed, as attackers with compromised credentials could leverage this flaw to gather information from the device.

Detailed information about CVE-2025-29845: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Synology Synology Router Manager (S

CVE-2025-29845: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Synology Synology Router Manager (SRM) - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-29845: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Synology Synology Router Manager (SRM)

A vulnerability in FileStation thumb cgi allows remote authenticated users to read/write image files.

CVE-2025-29843 identifies a path traversal vulnerability in Synology Router Manager (SRM) version 1.3, specifically within the FileStation thumb CGI component. This vulnerability arises from improper limitation of pathname inputs, allowing authenticated remote users to bypass directory restrictions and read or write image files outside the intended directory boundaries. The flaw is exploitable remotely over the network without user interaction but requires valid user credentials (low privilege). The vulnerability impacts confidentiality and integrity by enabling unauthorized access and modification of image files, which could be leveraged for further attacks or data leakage. The CVSS 3.1 base score is 5.4 (medium), reflecting network attack vector, low attack complexity, required privileges, no user interaction, and limited impact on confidentiality and integrity without availability impact. No public exploits have been reported yet, but the vulnerability is published and should be addressed promptly. The affected product, Synology SRM, is widely used in small to medium enterprises and home networks for router management and file services, making the vulnerability relevant for environments relying on these devices for network and file management. The lack of a patch link suggests that a fix may be pending or recently released, so monitoring Synology advisories is critical.

Detailed information about CVE-2025-29843: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Synology Synology Router Manager (S

CVE-2025-29843: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Synology Synology Router Manager (SRM) - Live Threat Intelligence - Threat Radar | OffSeq.com


CVE-2025-29846: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Synology Synology Router Manager (SRM)CVE-2025-29846 0 A vulnerability in portenable cgi allows remote authenticated users to get the status of installed packages. HighVulnerabilityUnited StatesGermanyJapan+7#cve #cve-2025-29846 Join the discussion	CVE Database V5	12/04/2025, 15:01:51 UTC Added: 12/04/2025, 15:15:17 UTC
CVE-2025-29845: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Synology Synology Router Manager (SRM)CVE-2025-29845 0 A vulnerability in VideoPlayer2 subtitle cgi allows remote authenticated users to read .srt files. MediumVulnerabilityGermanyFranceUnited Kingdom+5#cve #cve-2025-29845 Join the discussion	CVE Database V5	12/04/2025, 15:01:23 UTC Added: 12/04/2025, 15:15:17 UTC
CVE-2025-29843: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Synology Synology Router Manager (SRM)CVE-2025-29843 0 A vulnerability in FileStation thumb cgi allows remote authenticated users to read/write image files. MediumVulnerabilityGermanyFranceUnited Kingdom+5#cve #cve-2025-29843 Join the discussion	CVE Database V5	12/04/2025, 15:00:14 UTC Added: 12/04/2025, 15:15:17 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional