Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit NetSec

Reddit Cybersecurity

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

Bleeping Computer

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

csla

CSLA .NET is a framework designed for the development of reusable, object-oriented business layers for applications. Versions 5.5.4 and below allow the use of WcfProxy. WcfProxy uses the now-obsolete NetDataContractSerializer (NDCS) and is vulnerable to remote code execution during deserialization. This vulnerability is fixed in version 6.0.0. To workaround this issue, remove the WcfProxy in data portal configurations.

CVE-2025-66631 is a deserialization vulnerability classified under CWE-502 affecting the CSLA .NET framework developed by MarimerLLC. Specifically, versions 5.5.4 and below that utilize the WcfProxy component are vulnerable. WcfProxy relies on the NetDataContractSerializer (NDCS), which is now obsolete and insecure for deserializing untrusted data. This serializer can deserialize malicious payloads crafted by attackers, leading to remote code execution (RCE) without requiring authentication or user interaction. The vulnerability allows an attacker to send specially crafted serialized data to the vulnerable service endpoint, which when deserialized, executes arbitrary code in the context of the application. This can lead to full system compromise, data theft, or disruption of services. The vulnerability has a CVSS 4.0 base score of 7.2, reflecting its high impact and ease of exploitation over the network. The issue is resolved in CSLA .NET version 6.0.0 by removing the WcfProxy usage or replacing the serialization mechanism with a safer alternative. No known exploits are currently reported in the wild, but the vulnerability's characteristics make it a significant risk for affected deployments.

Detailed information about CVE-2025-66631: CWE-502: Deserialization of Untrusted Data in MarimerLLC csla affecting MarimerLLC csla. Get real-time updates, techn

CVE-2025-66631: CWE-502: Deserialization of Untrusted Data in MarimerLLC csla - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-66631: CWE-502: Deserialization of Untrusted Data in MarimerLLC csla

Directory Traversal vulnerability in Marimer LLC CSLA .Net before 8.0 allows a remote attacker to execute arbitrary code via a crafted script to the MobileFormatter component.

CVE-2024-28698 is a directory traversal vulnerability identified in the MobileFormatter component of Marimer LLC's CSLA .Net framework versions prior to 8.0. The flaw allows a remote attacker to craft malicious scripts that exploit improper input validation or path sanitization within the MobileFormatter, enabling traversal outside the intended directory scope. This traversal can lead to arbitrary code execution on the affected system. The vulnerability does not require any authentication or user interaction, making it remotely exploitable over the network. The CVSS v3.1 base score of 9.8 reflects the critical nature of this vulnerability, with attack vector being network (AV:N), low attack complexity (AC:L), no privileges required (PR:N), and no user interaction (UI:N). The impact covers confidentiality, integrity, and availability (C:H/I:H/A:H), meaning attackers can fully compromise affected systems. Although no public exploits have been reported yet, the vulnerability's characteristics suggest it could be weaponized quickly. The underlying issue aligns with CWE-22 (Improper Limitation of a Pathname to a Restricted Directory), a common and dangerous class of vulnerabilities. The absence of patch links indicates that a fix may not yet be publicly available, emphasizing the need for immediate risk mitigation.

Detailed information about CVE-2024-28698: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-28698: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-28698: n/a


CVE-2025-66631: CWE-502: Deserialization of Untrusted Data in MarimerLLC cslaCVE-2025-66631 0 CSLA .NET is a framework designed for the development of reusable, object-oriented business layers for applications. Versions 5.5.4 and below allow the use of WcfProxy. WcfProxy uses the now-obsolete NetDataContractSerializer (NDCS) and is vulnerable to remote code execution during deserialization. This vulnerability is fixed in version 6.0.0. To workaround this issue, remove the WcfProxy in data portal configurations. HighVulnerabilityGermanyFranceUnited Kingdom+3#cve #cve-2025-66631 #cwe-502 Join the discussion	CVE Database V5	12/09/2025, 03:18:37 UTC Added: 12/09/2025, 03:48:44 UTC
CVE-2024-28698: n/aCVE-2024-28698 0 Directory Traversal vulnerability in Marimer LLC CSLA .Net before 8.0 allows a remote attacker to execute arbitrary code via a crafted script to the MobileFormatter component. CriticalVulnerabilityUnited StatesGermanyUnited Kingdom+7#cve #cve-2024-28698 Join the discussion	CVE Database V5	07/22/2024, 00:00:00 UTC Added: 02/25/2026, 21:45:57 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional