Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

tutorial

A vulnerability was found in code-projects Client Details System 1.0. Affected by this issue is some unknown functionality of the file clientdetails/welcome.php of the component GET Parameter Handler. Performing manipulation of the argument ID results in sql injection. The attack may be initiated remotely. The exploit has been made public and could be used.

CVE-2025-12243 identifies a SQL injection vulnerability in the code-projects Client Details System version 1.0, specifically within the clientdetails/welcome.php file's GET parameter handler. The vulnerability arises from improper sanitization of the 'ID' parameter, allowing an attacker to inject arbitrary SQL commands remotely without requiring authentication or user interaction. The attack vector is network-based with low complexity, meaning an attacker can exploit it with minimal effort. The vulnerability impacts the confidentiality, integrity, and availability of the underlying database by enabling unauthorized data retrieval, modification, or deletion. Although no patches have been officially released, the public disclosure of exploit code increases the urgency for mitigation. The vulnerability does not involve scope changes or privilege escalation but can compromise sensitive client data managed by the system. The CVSS 4.0 vector indicates low complexity (AC:L), no privileges required (PR:L), no user interaction (UI:N), and partial impacts on confidentiality, integrity, and availability (L). This vulnerability is typical of classic SQL injection flaws caused by insufficient input validation and lack of parameterized queries. Organizations using this software should conduct immediate code reviews, implement input sanitization, and monitor for suspicious database queries to prevent exploitation.

Detailed information about CVE-2025-12243: SQL Injection in code-projects Client Details System affecting code-projects Client Details System. Get real-time upd

CVE-2025-12243: SQL Injection in code-projects Client Details System - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-12243: SQL Injection in code-projects Client Details System

Threats Tagged 'cve-2025-12243'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-12243'

Lead Pen Test Professional