Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit NetSec

Reddit Cybersecurity

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

AWS Security Bulletins

GCP Kubernetes Security

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

typeorm

TypeORM's migration:generate command embeds database schema metadata into JavaScript/TypeScript template literals without properly escaping template interpolation syntax `${...}`. This allows an attacker who can write schema metadata such as column comments or defaults to inject arbitrary code that executes when the generated migration file is loaded. The vulnerability affects TypeORM versions before 0.3.31 and versions from 1.0.0 up to but not including 1.1.0.

The TypeORM migration:generate command constructs migration files by embedding SQL statements inside JS/TS template literals, escaping backticks but not the `${...}` interpolation syntax. Schema metadata from various database drivers (Postgres, MySQL/MariaDB, CockroachDB) such as column comments and defaults are included without escaping `${`, allowing an attacker with write access to schema metadata to inject arbitrary JavaScript code. When the generated migration file is loaded (via migration:run, import, or require), the injected code executes. Confirmed injection vectors include MySQL column COMMENT and DEFAULT fields. The suggested fix is to escape `${` sequences or switch to safer string encoding methods.

Detailed information about TypeORM: migration:generate template-literal code injection affecting null typeorm. Get real-time updates, technical details, and mit

TypeORM: migration:generate template-literal code injection - Live Threat Intelligence - Threat Radar | OffSeq.com

TypeORM: migration:generate template-literal code injection

SQL Injection vulnerability in TypeORM before 0.3.26 via crafted request to repository.save or repository.update due to the sqlstring call using stringifyObjects default to false.

CVE-2025-60542 is a SQL Injection vulnerability identified in the TypeORM library, a popular Object-Relational Mapping (ORM) tool used in Node.js applications to interact with databases. The vulnerability exists in versions prior to 0.3.26 and is triggered via crafted requests to the repository.save or repository.update methods. The root cause lies in the sqlstring library call within TypeORM, where the stringifyObjects option defaults to false. This improper handling allows attackers to inject malicious SQL payloads directly into queries, bypassing typical sanitization mechanisms. The vulnerability does not require authentication or user interaction, making it remotely exploitable over the network. The CVSS v3.1 score is 6.5 (medium severity), reflecting a network attack vector with low complexity and no privileges required, impacting confidentiality and integrity but not availability. Although no known exploits have been reported in the wild, the vulnerability poses a significant risk to applications relying on vulnerable TypeORM versions, potentially leading to unauthorized data disclosure or modification. The lack of a patch link suggests that remediation involves upgrading to TypeORM 0.3.26 or later, where the issue is addressed by changing the default behavior of stringifyObjects or improving input sanitization. This vulnerability is classified under CWE-89 (Improper Neutralization of Special Elements used in an SQL Command), a common and critical class of injection flaws.

Detailed information about CVE-2025-60542: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2025-60542: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-60542: n/a


TypeORM: migration:generate template-literal code injection 0 TypeORM's migration:generate command embeds database schema metadata into JavaScript/TypeScript template literals without properly escaping template interpolation syntax `${...}`. This allows an attacker who can write schema metadata such as column comments or defaults to inject arbitrary code that executes when the generated migration file is loaded. The vulnerability affects TypeORM versions before 0.3.31 and versions from 1.0.0 up to but not including 1.1.0. MediumVulnerability#gcve #osv #ghsa-2rp8-mm9q-fp49 Join the discussion	GCVE Database	07/21/2026, 21:59:23 UTC Added: 07/22/2026, 00:11:12 UTC
CVE-2025-60542: n/aCVE-2025-60542 0 SQL Injection vulnerability in TypeORM before 0.3.26 via crafted request to repository.save or repository.update due to the sqlstring call using stringifyObjects default to false. MediumVulnerabilityGermanyUnited KingdomFrance+3#cve #cve-2025-60542 Join the discussion	CVE Database V5	10/29/2025, 00:00:00 UTC Added: 10/29/2025, 15:34:57 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional