Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit BlueTeam

Reddit ThreatIntel

Reddit Malware

Reddit Reverse Engineering

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

OS Command Injection Remote Code Execution Vulnerability in API in Progress LoadMaster allows an authenticated attacker with “User Administration” permissions to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in the API input parameters

CVE-2025-13444 is an OS command injection vulnerability found in Progress Software's LoadMaster, specifically version 7.2.50. The vulnerability arises from improper neutralization of special elements in API input parameters, allowing an attacker with authenticated User Administration privileges to inject and execute arbitrary operating system commands on the LoadMaster appliance. This occurs because the API fails to sanitize input correctly before passing it to system-level command execution contexts. The vulnerability requires authentication with elevated privileges, but no user interaction is needed beyond that. The CVSS 3.1 vector (AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) indicates that the attack can be performed remotely over a network with low complexity, requires high privileges, and results in complete compromise of confidentiality, integrity, and availability with scope change. The vulnerability was reserved in November 2025 and published in January 2026. No public exploit code or active exploitation has been reported yet. LoadMaster appliances are widely used for application delivery and load balancing, making this vulnerability critical for organizations relying on them for secure network traffic management.

Detailed information about CVE-2025-13444: Improper Neutralization of Special Elements used in an OS Command (‘OS Command Injection’) in Progress Software LoadM

CVE-2025-13444: Improper Neutralization of Special Elements used in an OS Command (‘OS Command Injection’) in Progress Software LoadMaster - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-13444: Improper Neutralization of Special Elements used in an OS Command (‘OS Command Injection’) in Progress Software LoadMaster

Threats Tagged 'cve-2025-13444'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-13444'

Lead Pen Test Professional