Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

CVE Database V5

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

ksoa

A vulnerability was determined in Yonyou KSOA 9.0. The impacted element is an unknown function of the file /kmf/folder.jsp of the component HTTP GET Parameter Handler. Executing a manipulation of the argument folderid can lead to sql injection. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.

CVE-2026-1133 is a SQL injection vulnerability identified in Yonyou KSOA version 9.0, specifically within the /kmf/folder.jsp component that processes the HTTP GET parameter folderid. This vulnerability arises from improper sanitization or validation of the folderid parameter, allowing an attacker to inject malicious SQL code into backend database queries. The injection flaw can be exploited remotely without requiring authentication or user interaction, making it accessible to unauthenticated attackers over the network. Successful exploitation can lead to unauthorized access to sensitive data, modification or deletion of database records, and potential disruption of service, although the impact is assessed as limited in scope (partial confidentiality, integrity, and availability). The vulnerability has a CVSS 4.0 base score of 6.9, reflecting medium severity with network attack vector, low attack complexity, and no privileges or user interaction needed. Despite early notification, the vendor Yonyou has not issued a patch or official response, and public exploit information is available, increasing the risk of exploitation. The lack of vendor remediation necessitates that organizations using KSOA 9.0 implement alternative mitigations to reduce exposure. This vulnerability is particularly concerning for enterprises relying on Yonyou's KSOA platform for business operations, as it could be leveraged to compromise critical backend systems and data integrity.

Detailed information about CVE-2026-1133: SQL Injection in Yonyou KSOA affecting Yonyou KSOA. Get real-time updates, technical details, and mitigation strategie

CVE-2026-1133: SQL Injection in Yonyou KSOA - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-1133: SQL Injection in Yonyou KSOA

A vulnerability was determined in Yonyou KSOA 9.0. The impacted element is an unknown function of the file /worksheet/del_user.jsp of the component HTTP GET Parameter Handler. Executing a manipulation of the argument ID can lead to sql injection. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.

CVE-2025-15425 identifies a SQL injection vulnerability in Yonyou KSOA version 9.0, a business management software widely used in enterprise environments. The flaw exists in an unspecified function within the /worksheet/del_user.jsp component, which processes HTTP GET requests. Specifically, the 'ID' parameter is not properly sanitized or validated, allowing an attacker to inject arbitrary SQL commands. This vulnerability can be exploited remotely without any authentication or user interaction, increasing the risk of automated attacks. The SQL injection could enable attackers to read, modify, or delete sensitive data stored in the backend database, potentially compromising the confidentiality, integrity, and availability of critical business information. The vendor was notified early but has not issued a patch or response, and while no known exploits are currently active in the wild, the public disclosure raises the risk of imminent exploitation. The CVSS 4.0 score of 6.9 reflects a medium severity, considering the network attack vector, lack of required privileges, and partial impact on data confidentiality, integrity, and availability. The vulnerability affects only version 9.0 of the product, and no mitigations or patches have been officially released to date.

Detailed information about CVE-2025-15425: SQL Injection in Yonyou KSOA affecting Yonyou KSOA. Get real-time updates, technical details, and mitigation strategi

CVE-2025-15425: SQL Injection in Yonyou KSOA - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-15425: SQL Injection in Yonyou KSOA


CVE-2026-1133: SQL Injection in Yonyou KSOACVE-2026-1133 0 A vulnerability was determined in Yonyou KSOA 9.0. The impacted element is an unknown function of the file /kmf/folder.jsp of the component HTTP GET Parameter Handler. Executing a manipulation of the argument folderid can lead to sql injection. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way. MediumVulnerabilityChinaSingaporeMalaysia+6#cve #cve-2026-1133 Join the discussion	CVE Database V5	01/19/2026, 02:02:06 UTC Added: 01/19/2026, 02:41:46 UTC
CVE-2025-15425: SQL Injection in Yonyou KSOACVE-2025-15425 0 A vulnerability was determined in Yonyou KSOA 9.0. The impacted element is an unknown function of the file /worksheet/del_user.jsp of the component HTTP GET Parameter Handler. Executing a manipulation of the argument ID can lead to sql injection. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way. MediumVulnerabilityChinaSingaporeMalaysia+5#cve #cve-2025-15425 Join the discussion	CVE Database V5	01/02/2026, 03:02:07 UTC Added: 01/02/2026, 03:13:48 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional