Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Malware

Reddit Reverse Engineering

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

vlife

vlife through 2.0.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge JWTs using the hardcoded HS256 signing key in TokenUtil. Attackers can sign a token with superUser=true and arbitrary groupIds claims to gain super administrator access to any URL on vlife instances.

CVE-2026-110612 describes an authentication bypass vulnerability in vlife through version 2.0.1. The issue arises from the use of a hardcoded cryptographic key for signing JWT tokens in the TokenUtil component. Attackers can exploit this by forging JWTs signed with the known HS256 key, setting the superUser claim to true and arbitrary groupIds, thereby gaining unauthorized super administrator access to any URL on the affected vlife instances.

vlife versions up to and including 2.0.1 have an authentication bypass vulnerability due to a hardcoded HS256 signing key. This allows unauthenticated attackers to forge JWT tokens with superUser privileges and arbitrary groupIds, granting super administrator access to any URL on affected vlife inst

CVE-2026-110612: Use of Hard-coded Cryptographic Key in wwwlike vlife

A security vulnerability has been detected in wwwlike vlife up to 2.0.1. This issue affects the function create of the file vlife-base/src/main/java/cn/wwwlike/sys/api/SysFileApi.java of the component VLifeApi. Such manipulation of the argument fileName leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used.

CVE-2025-13266 is a path traversal vulnerability identified in the wwwlike vlife software, specifically affecting versions 2.0.0 and 2.0.1. The vulnerability resides in the create function within the SysFileApi.java source file (vlife-base/src/main/java/cn/wwwlike/sys/api/SysFileApi.java). The flaw allows an attacker to manipulate the fileName parameter in a way that bypasses intended file path restrictions, enabling access to files outside the designated directory. This can be exploited remotely without requiring any authentication or user interaction, as indicated by the CVSS vector (AV:N/AC:L/AT:N/UI:N/PR:N). The vulnerability impacts confidentiality by potentially exposing sensitive files on the server. The CVSS 4.0 score of 6.9 reflects a medium severity, driven by the ease of exploitation and the potential for unauthorized data access. Although no exploits have been reported in the wild yet, the public disclosure of the vulnerability increases the likelihood of exploitation attempts. The vulnerability does not affect integrity or availability directly but poses a significant risk of information leakage. The lack of available patches at the time of reporting necessitates immediate mitigation efforts by affected organizations. Given the nature of the vulnerability, attackers could leverage it to gather sensitive configuration files, credentials, or other critical data stored on the server, which could facilitate further attacks.

Detailed information about CVE-2025-13266: Path Traversal in wwwlike vlife affecting wwwlike vlife. Get real-time updates, technical details, and mitigation str

CVE-2025-13266: Path Traversal in wwwlike vlife - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-13266: Path Traversal in wwwlike vlife


CVE-2026-110612: Use of Hard-coded Cryptographic Key in wwwlike vlifeCVE-2026-110612 0 vlife through 2.0.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge JWTs using the hardcoded HS256 signing key in TokenUtil. Attackers can sign a token with superUser=true and arbitrary groupIds claims to gain super administrator access to any URL on vlife instances. CriticalVulnerability#cve #cve-2026-110612 Join the discussion	CVE Database V5	10/14/2026, 14:16:52 UTC Added: 10/14/2026, 14:34:21 UTC
CVE-2025-13266: Path Traversal in wwwlike vlifeCVE-2025-13266 0 A security vulnerability has been detected in wwwlike vlife up to 2.0.1. This issue affects the function create of the file vlife-base/src/main/java/cn/wwwlike/sys/api/SysFileApi.java of the component VLifeApi. Such manipulation of the argument fileName leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used. MediumVulnerabilityGermanyFranceUnited Kingdom+5#cve #cve-2025-13266 Join the discussion	CVE Database V5	11/17/2025, 06:02:06 UTC Added: 11/17/2025, 06:15:24 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional