Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

CVE Database V5

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

desktop-app

The Stackfield Desktop App before 1.10.2 for macOS and Windows contains a path traversal vulnerability in certain decryption functionality when processing the filePath property. A malicious export can write arbitrary content to any path on the victim's filesystem.

The Stackfield Desktop App prior to version 1.10.2 for macOS and Windows contains a path traversal vulnerability related to its decryption process. Specifically, when handling the filePath property during a malicious export, the application can be tricked into writing arbitrary data to arbitrary filesystem locations. This could potentially allow an attacker to overwrite or create files anywhere on the victim's system, depending on the privileges of the application. No CVSS score or detailed vendor advisory is available to clarify the full impact or remediation status.

Detailed information about CVE-2026-28373: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2026-28373: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-28373: n/a

Desktop-App

A command injection vulnerability exists in Windscribe for Linux Desktop App that allows a local user who is a member of the windscribe group to execute arbitrary commands as root via the 'adapterName' parameter of the 'changeMTU' function. Fixed in Windscribe v2.18.3-alpha and v2.18.8.

CVE-2025-65199 is an OS command injection vulnerability classified under CWE-78 found in the Windscribe for Linux Desktop App, specifically in versions 2.10.1. The vulnerability arises from improper neutralization of special elements in the 'adapterName' parameter of the 'changeMTU' function, which is used to modify the Maximum Transmission Unit settings. A local attacker who is a member of the 'windscribe' group can exploit this flaw to inject arbitrary OS commands that are executed with root privileges. This occurs because the input passed to the 'changeMTU' function is not properly sanitized before being used in system-level command execution, allowing command chaining or injection. The vulnerability does not require user interaction but does require the attacker to have local access and membership in the windscribe group, which is typically granted to users who manage or use the Windscribe VPN client. The impact of this vulnerability is severe, as it compromises confidentiality, integrity, and availability by enabling full root-level control over the affected system. The vendor has addressed this issue in versions 2.18.3-alpha and 2.18.8 by implementing proper input validation and sanitization. No public exploits have been reported yet, but the vulnerability's characteristics make it a critical concern for environments where Windscribe Linux clients are deployed.

Detailed information about CVE-2025-65199: CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in Windscribe Winds

CVE-2025-65199: CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in Windscribe Windscribe for Linux Desktop App - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-65199: CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in Windscribe Windscribe for Linux Desktop App


CVE-2026-28373: n/aCVE-2026-28373 0 The Stackfield Desktop App before 1.10.2 for macOS and Windows contains a path traversal vulnerability in certain decryption functionality when processing the filePath property. A malicious export can write arbitrary content to any path on the victim's filesystem. CriticalVulnerability#cve #cve-2026-28373 Join the discussion	CVE Database V5	04/03/2026, 00:00:00 UTC Added: 04/03/2026, 17:00:32 UTC
CVE-2025-65199: CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in Windscribe Windscribe for Linux Desktop AppCVE-2025-65199 0 A command injection vulnerability exists in Windscribe for Linux Desktop App that allows a local user who is a member of the windscribe group to execute arbitrary commands as root via the 'adapterName' parameter of the 'changeMTU' function. Fixed in Windscribe v2.18.3-alpha and v2.18.8. HighVulnerabilityGermanyFranceNetherlands+3#cve #cve-2025-65199 #cwe-78 Join the discussion	CVE Database V5	12/10/2025, 18:04:35 UTC Added: 12/10/2025, 18:21:19 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional