Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

AlienVault OTX General

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

GCP Compute Engine Security

JVN Japan

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

ListCheck.exe developed by Acer has a Local Privilege Escalation vulnerability. Authenticated local attackers can replace ListCheck.exe with a malicious executable of the same name, which will be executed by the system and result in privilege escalation.

CVE-2025-14305 identifies a Local Privilege Escalation (LPE) vulnerability in the Acer ListCheck.exe component. The root cause is an incorrect authorization mechanism (CWE-863) that allows authenticated local users to replace the legitimate ListCheck.exe binary with a malicious executable of the same name. Since ListCheck.exe is executed by the system with elevated privileges, this replacement leads to privilege escalation, granting the attacker higher system rights than originally assigned. The vulnerability does not require user interaction and can be exploited by any authenticated local user with the ability to write to the location where ListCheck.exe resides. The CVSS 4.0 score of 8.5 reflects a high severity due to the ease of exploitation (low attack complexity), no need for user interaction, and the significant impact on confidentiality, integrity, and availability (all rated high). The vulnerability affects Acer systems running the vulnerable version of ListCheck.exe, though specific version details are not provided. No patches or known exploits are currently available, but the vulnerability is publicly disclosed and should be addressed promptly. The flaw highlights a failure in proper authorization checks to prevent unauthorized file replacement, a critical security oversight in software design.

Detailed information about CVE-2025-14305: CWE-863 Incorrect Authorization in Acer ListCheck.exe affecting Acer ListCheck.exe. Get real-time updates, technical 

CVE-2025-14305: CWE-863 Incorrect Authorization in Acer ListCheck.exe - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-14305: CWE-863 Incorrect Authorization in Acer ListCheck.exe

Threats Tagged 'cve-2025-14305'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-14305'

Lead Pen Test Professional