Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

A vulnerability was reported in the Lenovo Scanner pro application during an internal security assessment that, under certain circumstances, could allow an attacker on the same logical network to disclose sensitive user files from the application.

CVE-2025-12047 is a vulnerability identified in the Lenovo Scanner Pro application, classified under CWE-295 for improper certificate validation. The flaw was discovered during an internal security assessment and affects the application's ability to correctly verify SSL/TLS certificates when communicating over a network. This improper validation can be exploited by an attacker positioned on the same logical network segment as the victim to intercept and manipulate network traffic. Specifically, the attacker could perform a man-in-the-middle (MITM) attack to access sensitive user files managed or transmitted by the Scanner Pro application. The vulnerability does not require the attacker to have prior authentication or the victim to perform any interaction, increasing the risk in shared network environments such as corporate LANs or public Wi-Fi. The CVSS 4.0 vector indicates the attack requires adjacent network access (AV:A), high attack complexity (AC:H), no privileges (PR:N), no user interaction (UI:N), and results in high confidentiality impact (VC:H) but no impact on integrity or availability. No patches or known exploits are currently available, but the vulnerability remains a concern due to the sensitive nature of the data handled by scanning applications. The affected version is listed as '0', which likely indicates initial or early releases of the product. The vulnerability's presence highlights the critical need for robust certificate validation in applications handling sensitive data to prevent unauthorized disclosure.

Detailed information about CVE-2025-12047: CWE-295: Improper Certificate Validation in Lenovo Scanner Pro affecting Lenovo Scanner Pro. Get real-time updates, t

CVE-2025-12047: CWE-295: Improper Certificate Validation in Lenovo Scanner Pro - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-12047: CWE-295: Improper Certificate Validation in Lenovo Scanner Pro

Threats Tagged 'cve-2025-12047'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-12047'

Lead Pen Test Professional