Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit NetSec

Reddit Cybersecurity

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

AlienVault OTX General

SANS ISC Handlers Diary

CVE Database V5

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

agent-zero

agent-zero versions 1.7, 1.8, 1.9, and 1.10 contain a directory traversal vulnerability in the save_file_b64 method of python/helpers/file_browser.py. This method accepts user-controlled file paths without proper normalization or validation, enabling attackers to perform path traversal attacks.

The save_file_b64 function in agent-zero versions 1.7 through 1.10 improperly handles user-supplied file paths, lacking normalization or validation. This flaw allows an attacker to craft file paths that traverse directories outside the intended scope, potentially leading to unauthorized file write operations.

Detailed information about CVE-2026-51852: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2026-51852: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-51852: n/a

A vulnerability was found in frdel Agent-Zero up to 0.8.4. It has been rated as problematic. This issue affects the function image_get of the file /python/api/image_get.py. The manipulation of the argument path leads to path traversal. Upgrading to version 0.8.4.1 is able to address this issue. The identifier of the patch is 5db74202d632306a883ccce7339c5bdba0d16c5a. It is recommended to upgrade the affected component.

CVE-2025-6166 is a path traversal vulnerability identified in the frdel Agent-Zero software, affecting versions 0.8.0 through 0.8.4. The vulnerability resides in the image_get function within the /python/api/image_get.py file. Specifically, the issue arises from improper validation or sanitization of the 'path' argument, allowing an attacker with limited privileges (PR:L) to manipulate this parameter to traverse directories outside the intended scope. This can lead to unauthorized access to files on the host system that the Agent-Zero process has permissions to read. The vulnerability does not require user interaction (UI:N) and does not allow for privilege escalation or modification of data integrity or availability, but it does impact confidentiality by potentially exposing sensitive files. The attack vector is adjacent network (AV:A), meaning the attacker must have some level of network access to the vulnerable system, such as being on the same local network or connected via VPN. The vulnerability has a CVSS 4.0 base score of 5.1, categorized as medium severity. The issue is addressed by upgrading to version 0.8.4.1, which includes a patch identified by commit 5db74202d632306a883ccce7339c5bdba0d16c5a. There are no known exploits in the wild at the time of publication, and no user interaction is required for exploitation. The scope of impact is limited to confidentiality, with no impact on integrity or availability, and the vulnerability does not propagate beyond the vulnerable component.

Detailed information about CVE-2025-6166: Path Traversal in frdel Agent-Zero affecting frdel Agent-Zero. Get real-time updates, technical details, and mitigatio

CVE-2025-6166: Path Traversal in frdel Agent-Zero - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-6166: Path Traversal in frdel Agent-Zero


CVE-2026-51852: n/aCVE-2026-51852 0 agent-zero versions 1.7, 1.8, 1.9, and 1.10 contain a directory traversal vulnerability in the save_file_b64 method of python/helpers/file_browser.py. This method accepts user-controlled file paths without proper normalization or validation, enabling attackers to perform path traversal attacks. HighVulnerability#cve #cve-2026-51852 Join the discussion	CVE Database V5	09/30/2026, 00:00:00 UTC Added: 09/30/2026, 21:03:49 UTC
CVE-2025-6166: Path Traversal in frdel Agent-ZeroCVE-2025-6166 0 A vulnerability was found in frdel Agent-Zero up to 0.8.4. It has been rated as problematic. This issue affects the function image_get of the file /python/api/image_get.py. The manipulation of the argument path leads to path traversal. Upgrading to version 0.8.4.1 is able to address this issue. The identifier of the patch is 5db74202d632306a883ccce7339c5bdba0d16c5a. It is recommended to upgrade the affected component. MediumVulnerabilityGermanyFranceUnited Kingdom+5#cve #cve-2025-6166 Join the discussion	CVE Database V5	06/17/2025, 06:00:19 UTC Added: 06/17/2025, 06:04:26 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional