Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

A weakness in Automated Logic and Carrier i-Vu Gen5 router on driver
  version  drv_gen5_106-01-2380, allows
  malformed packets to be sent through BACnet MS/TP network causing the devices to enter a fault state. This fault state requires a manual power cycle to
  return the device to network visibility.

CVE-2025-0657 identifies a critical vulnerability in Automated Logic's WebCtrl and Carrier's i-Vu Gen5 router devices running driver version drv_gen5_106-01-2380. The root cause is improper validation of array indexes (CWE-129), which allows specially crafted BACnet MS/TP packets to cause the device firmware to access invalid memory locations. This leads the device to enter a fault state where it becomes unresponsive on the network. Recovery from this state requires a manual power cycle, as the device does not self-recover. The vulnerability is exploitable remotely over the BACnet MS/TP protocol without any authentication or user interaction, making it highly accessible to attackers with network access. The CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N) reflects network attack vector, low complexity, no privileges or user interaction needed, and high impact on confidentiality, with limited impact on integrity and availability. Although no public exploits are known, the potential for denial of service and operational disruption in building automation systems is significant. The affected products are widely used in smart building and industrial control environments, where continuous availability is critical. The vulnerability also relates to CWE-248, indicating improper handling of exceptional conditions, which compounds the risk of device failure. No patches have been published yet, so mitigation relies on network controls and monitoring.

Detailed information about CVE-2025-0657: CWE-129 Improper Validation of Array Index in Automated Logic WebCtrl affecting Automated Logic WebCtrl. Get real-time

CVE-2025-0657: CWE-129 Improper Validation of Array Index in Automated Logic WebCtrl - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-0657: CWE-129 Improper Validation of Array Index in Automated Logic WebCtrl

Threats Tagged 'cve-2025-0657'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-0657'

Lead Pen Test Professional