Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Zero Day Initiative

Cisco Talos

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

quartus-prime-standard

quartus-prime-lite

Uncontrolled Search Path Element vulnerability in Altera Quartus Prime Standard on Windows (Nios II Command Shell modules), Altera Quartus Prime Lite on Windows (Nios II Command Shell modules) allows Search Order Hijacking.This issue affects Quartus Prime Standard: from 19.1 through 24.1; Quartus Prime Lite: from 19.1 through 24.1.

CVE-2025-14625 is classified under CWE-427, indicating an Uncontrolled Search Path Element vulnerability in the Altera Quartus Prime Standard and Lite software suites on Windows platforms. The vulnerability specifically resides in the Nios II Command Shell modules, which are part of the FPGA development environment used for embedded system design. The issue arises because the software does not properly control or sanitize the search path used to locate executable modules or DLLs. An attacker with low-level privileges can exploit this by inserting malicious executables or libraries into directories that are searched before the legitimate ones, causing the software to load and execute attacker-controlled code. The vulnerability requires user interaction and has a high complexity for attack but can lead to significant compromise of the affected system's confidentiality, integrity, and availability. The affected versions span from 19.1 through 24.1 for both Quartus Prime Standard and Lite editions. Although no public exploits are known, the vulnerability's presence in widely used FPGA development tools poses a risk, especially in environments where these tools are used for critical embedded system development. The CVSS 4.0 vector indicates local attack vector, high attack complexity, partial privileges required, user interaction needed, and high impact on confidentiality, integrity, and availability.

Detailed information about CVE-2025-14625: CWE-427 Uncontrolled Search Path Element in Altera Quartus Prime Standard affecting Altera Quartus Prime Standard. Ge

CVE-2025-14625: CWE-427 Uncontrolled Search Path Element in Altera Quartus Prime Standard - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-14625: CWE-427 Uncontrolled Search Path Element in Altera Quartus Prime Standard

Threats Tagged 'cve-2025-14625'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-14625'

Lead Pen Test Professional