Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Zero Day Initiative

Cisco Talos

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Improper access checks in M-Files Server before 25.12.15491.7 allows users to download files through M-Files Web using Web Companion despite Print and Download Prevention module being enabled.

CVE-2025-14318 is an authorization vulnerability classified under CWE-863 affecting M-Files Server versions prior to 25.12.15491.7. The flaw arises from improper access checks in the M-Files Web interface, specifically when using the Web Companion feature. Despite the presence of the Print and Download Prevention module designed to restrict file downloads, this vulnerability allows users with limited privileges to circumvent these restrictions and download files they should not have access to. The vulnerability does not require user interaction and can be exploited remotely over the network with low attack complexity. The CVSS 4.0 vector indicates network attack vector (AV:N), low attack complexity (AC:L), no privileges required (PR:L), no user interaction (UI:N), and limited impact on confidentiality (VC:L) with no impact on integrity or availability. This suggests that an attacker with some level of privileges can exploit the flaw to gain unauthorized read access to files, potentially leading to data leakage. No public exploits have been reported yet, but the vulnerability's existence necessitates prompt remediation. The lack of a patch link in the provided data suggests that a fix may be forthcoming or that users should upgrade to versions at or beyond 25.12.15491.7 once available. This vulnerability primarily threatens the confidentiality of sensitive documents managed within M-Files Server environments, especially in organizations relying on strict access controls for regulatory compliance or intellectual property protection.

Detailed information about CVE-2025-14318: CWE-863 Incorrect Authorization in M-Files Corporation M-Files Server affecting M-Files Corporation M-Files Server. G

CVE-2025-14318: CWE-863 Incorrect Authorization in M-Files Corporation M-Files Server - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-14318: CWE-863 Incorrect Authorization in M-Files Corporation M-Files Server

Threats Tagged 'cve-2025-14318'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-14318'

Lead Pen Test Professional