Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit NetSec

Reddit Cybersecurity

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

AWS Security Bulletins

GCP Kubernetes Security

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

easyimages

An arbitrary file rename vulnerability in the /admin/manager.php component of EasyImages 2.0 v2.8.6 and below allows attackers to execute arbitrary code via renaming a PHP file to a SVG format.

CVE-2025-65474 is an arbitrary file rename vulnerability identified in the /admin/manager.php component of EasyImages 2.0 version 2.8.6 and earlier. This vulnerability allows an attacker with at least limited privileges (PR:L) to rename a PHP file to an SVG file format, effectively bypassing file type validation mechanisms. By doing so, the attacker can upload or rename a malicious PHP script disguised as an SVG image, which the server may then execute, leading to arbitrary code execution on the affected system. The vulnerability is exploitable remotely over the network (AV:N) with low attack complexity (AC:L) and does not require user interaction (UI:N). The scope is unchanged (S:U), meaning the impact is confined to the vulnerable component or system. The CVSS v3.1 base score is 8.8, indicating a high severity due to the potential for full compromise of confidentiality, integrity, and availability (C:H/I:H/A:H). The weakness corresponds to CWE-434, which relates to improper handling of file uploads or renames that can lead to security issues. Although no known exploits have been reported in the wild yet, the vulnerability presents a significant risk, especially for web servers running EasyImages with accessible administrative interfaces. The lack of available patches at the time of publication necessitates immediate mitigation through configuration changes and monitoring. This vulnerability is critical for environments where EasyImages is used to manage images and files, as it can be leveraged to gain unauthorized control over the server.

Detailed information about CVE-2025-65474: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2025-65474: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-65474: n/a

An arbitrary file rename vulnerability in the /admin/filer.php component of EasyImages 2.0 v2.8.6 and below allows attackers with Administrator privileges to execute arbitrary code via injecting a crafted payload into an uploaded file name.

CVE-2025-65473 is a vulnerability identified in the EasyImages 2.0 software, specifically affecting versions 2.8.6 and below. The flaw exists in the /admin/filer.php component, which handles file management within the administrative interface. The vulnerability allows an attacker who already has Administrator privileges to perform an arbitrary file rename by injecting a crafted payload into the name of an uploaded file. This manipulation can lead to arbitrary code execution on the server, as the system may process the maliciously renamed file in a way that triggers code execution. Since the attacker must have administrative access, the vulnerability is a post-authentication issue, but it significantly elevates the risk by enabling privilege abuse and potential full system compromise. No CVSS score has been assigned yet, and no public exploits have been reported, indicating it may be newly discovered or not yet weaponized. The lack of patch links suggests that a fix is not yet publicly available, emphasizing the need for immediate attention from affected organizations. The vulnerability highlights the importance of secure file handling and input validation in web applications, especially those managing content and media files. Attackers exploiting this flaw could gain persistent control over the affected systems, potentially leading to data breaches, service disruption, or lateral movement within the network.

Detailed information about CVE-2025-65473: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2025-65473: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-65473: n/a


CVE-2025-65474: n/aCVE-2025-65474 0 An arbitrary file rename vulnerability in the /admin/manager.php component of EasyImages 2.0 v2.8.6 and below allows attackers to execute arbitrary code via renaming a PHP file to a SVG format. HighVulnerabilityGermanyFranceUnited Kingdom+3#cve #cve-2025-65474 Join the discussion	CVE Database V5	12/11/2025, 00:00:00 UTC Added: 12/11/2025, 16:53:56 UTC
CVE-2025-65473: n/aCVE-2025-65473 0 An arbitrary file rename vulnerability in the /admin/filer.php component of EasyImages 2.0 v2.8.6 and below allows attackers with Administrator privileges to execute arbitrary code via injecting a crafted payload into an uploaded file name. CriticalVulnerabilityGermanyFranceUnited Kingdom+3#cve #cve-2025-65473 Join the discussion	CVE Database V5	12/11/2025, 00:00:00 UTC Added: 12/11/2025, 16:38:56 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional