Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Krebs on Security

Palo Alto Unit 42

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

CWE-276: Incorrect Default Permissions vulnerability exists that could cause  privilege escalation through the reverse shell when  one or more executable service binaries are modified in the installation folder by a local user with normal privilege upon service restart.

CVE-2025-13905 is a vulnerability classified under CWE-276 (Incorrect Default Permissions) found in Schneider Electric's EcoStruxure™ Process Expert product, affecting all versions prior to 2025. The core issue arises from improperly set default permissions on executable service binaries located in the installation folder. These permissions allow local users with standard privileges to modify one or more of these binaries. When the affected service is restarted, the modified binaries can execute a reverse shell, enabling privilege escalation to higher system privileges. This attack vector requires the attacker to have local access and the ability to interact with the system to restart the service, but it does not require authentication bypass or network access. The vulnerability has a CVSS 4.0 base score of 7.0, indicating high severity, with attack vector local (AV:L), low attack complexity (AC:L), no privileges required (PR:L), and user interaction required (UI:P). The impact on confidentiality, integrity, and availability is high, as an attacker could gain elevated privileges and potentially control the system. No patches or exploits are currently publicly available, but the vulnerability poses a significant risk to industrial environments relying on EcoStruxure™ Process Expert for process automation and control. The vulnerability's exploitation could disrupt industrial operations, cause data breaches, or enable further lateral movement within critical infrastructure networks.

Detailed information about CVE-2025-13905: CWE-276 Incorrect Default Permissions in Schneider Electric EcoStruxure™ Process Expert affecting Schneider Electric 

CVE-2025-13905: CWE-276 Incorrect Default Permissions in Schneider Electric EcoStruxure™ Process Expert - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-13905: CWE-276 Incorrect Default Permissions in Schneider Electric EcoStruxure™ Process Expert

Threats Tagged 'cve-2025-13905'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-13905'

Lead Pen Test Professional