Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

In the default installation and configuration of Gladinet CentreStack and TrioFox, there is an unauthenticated Local File Inclusion Flaw that allows unintended disclosure of system files. Exploitation of this vulnerability has been observed in the wild. 

This issue impacts Gladinet CentreStack and Triofox: All versions prior to and including 16.7.10368.56560

CVE-2025-11371 identifies a Local File Inclusion (LFI) vulnerability in Gladinet CentreStack and TrioFox products, specifically in their default installation and configuration. LFI vulnerabilities occur when an application includes files based on user input without proper validation, enabling attackers to read arbitrary files on the server. In this case, the flaw allows unauthenticated remote attackers to access sensitive system files, potentially exposing configuration files, credentials, or other critical data. The vulnerability affects all versions up to and including 16.7.10368.56560. The CVSS v3.1 base score is 7.5, reflecting a network attack vector (AV:N), low attack complexity (AC:L), no privileges required (PR:N), no user interaction (UI:N), unchanged scope (S:U), high confidentiality impact (C:H), and no impact on integrity or availability (I:N, A:N). This means an attacker can exploit the vulnerability remotely without authentication or user interaction to gain unauthorized read access to system files. Although no public exploits have been reported yet, the vulnerability's characteristics make it a prime target for attackers seeking to gather sensitive information for further attacks. The CWE-552 classification highlights the risk of unintended information disclosure due to improper file inclusion. The vulnerability was reserved on October 6, 2025, and published on October 9, 2025, indicating recent discovery and disclosure. No official patches are currently linked, suggesting that users must monitor vendor communications closely for updates. The vulnerability's presence in default configurations underscores the importance of secure deployment practices.

Detailed information about CVE-2025-11371: Vulnerability in Gladinet CentreStack and TrioFox affecting Gladinet CentreStack and TrioFox. Get real-time updates, 

CVE-2025-11371: Vulnerability in Gladinet CentreStack and TrioFox - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-11371: Vulnerability in Gladinet CentreStack and TrioFox

Threats Tagged 'cve-2025-11371'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-11371'

Lead Pen Test Professional