Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Microsoft Security Blog

Google Project Zero

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

A Guard Tour VAPIX API parameter allowed the use of arbitrary values and can be incorrectly called, allowing an attacker to block access to the guard tour configuration page in the web interface of the Axis device.

CVE-2025-0325 is a medium-severity vulnerability identified in Axis Communications AB's AXIS OS, affecting multiple versions ranging from 6.50.0 through 12.0.0. The vulnerability arises from improper validation of input parameters in the Guard Tour VAPIX API, specifically allowing arbitrary values to be passed and incorrectly processed. This flaw enables an attacker with limited privileges (requires low privileges but no user interaction) to block access to the guard tour configuration page within the web interface of the Axis device. The Guard Tour feature is typically used in security cameras and surveillance devices to automate patrol routes or monitoring sequences. The vulnerability is categorized under CWE-1287 (Improper Validation of Specified Type of Input) and CWE-628 (Incorrect Handling of Exceptional Conditions). The CVSS v3.1 base score is 4.3, reflecting a network attack vector with low complexity, requiring privileges but no user interaction, and resulting in availability impact only (denial of access to configuration). There are no known exploits in the wild at the time of publication, and no patches have been linked yet. This vulnerability does not affect confidentiality or integrity but can disrupt availability by preventing administrators from accessing and managing guard tour configurations, potentially degrading surveillance effectiveness and operational security management.

Detailed information about CVE-2025-0325: CWE-1287: Improper Validation of Specified Type of Input in Axis Communications AB AXIS OS affecting Axis Communicatio

CVE-2025-0325: CWE-1287: Improper Validation of Specified Type of Input in Axis Communications AB AXIS OS - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-0325: CWE-1287: Improper Validation of Specified Type of Input in Axis Communications AB AXIS OS

Threats Tagged 'cve-2025-0325'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-0325'

Lead Pen Test Professional