Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Content-Management-System

A security flaw has been discovered in CTCMS Content Management System up to 2.1.2. The impacted element is an unknown function in the library /ctcms/libs/Ct_Config.php of the component Backend System Configuration Module. The manipulation of the argument Cj_Add/Cj_Edit results in code injection. The attack can be executed remotely. The exploit has been released to the public and may be exploited.

CVE-2025-14730 is a code injection vulnerability identified in the CTCMS Content Management System versions 2.1.0 through 2.1.2. The vulnerability resides in an unspecified function within the Backend System Configuration Module, specifically in the /ctcms/libs/Ct_Config.php file. The root cause is improper validation or sanitization of the Cj_Add/Cj_Edit argument, which can be manipulated by an attacker to inject and execute arbitrary code remotely. This flaw does not require user interaction but does require the attacker to have some level of privileges (PR:H), indicating that full unauthenticated remote exploitation is not possible, but an authenticated or partially privileged attacker could exploit it. The CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P) reflects network attack vector, low attack complexity, no user interaction, and partial impacts on confidentiality, integrity, and availability. The exploit has been publicly disclosed, increasing the risk of exploitation, although no active exploitation in the wild has been reported yet. The vulnerability could allow attackers to execute arbitrary code on the server hosting the CMS, potentially leading to data breaches, defacement, or service disruption. Since the vulnerability affects a backend configuration module, successful exploitation could also enable attackers to alter system configurations or escalate privileges. No official patches or mitigation links are currently provided, emphasizing the need for immediate defensive measures. Organizations using CTCMS should monitor for suspicious activity targeting the Cj_Add/Cj_Edit parameters and restrict access to backend modules to trusted users only.

Detailed information about CVE-2025-14730: Code Injection in CTCMS Content Management System affecting CTCMS Content Management System. Get real-time updates, t

CVE-2025-14730: Code Injection in CTCMS Content Management System - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-14730: Code Injection in CTCMS Content Management System

Threats Tagged 'cve-2025-14730'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-14730'

Lead Pen Test Professional