Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

tc155

A vulnerability has been found in Ningyuanda TC155 57.0.2.0. The affected element is an unknown function of the component RTSP Live Video Stream Endpoint. Such manipulation leads to improper authentication. The attack must be carried out from within the local network. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVE-2025-14746 identifies an improper authentication vulnerability in the Ningyuanda TC155 device, version 57.0.2.0, specifically within the RTSP Live Video Stream Endpoint component. The flaw arises from an unknown function that fails to enforce proper authentication, allowing an attacker with local network access to bypass authentication mechanisms and access live video streams without credentials. The vulnerability does not require user interaction, privileges, or authentication, and the attack complexity is low. The CVSS 4.0 vector (AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P) reflects that the attack must be performed from the local network (AV:A), has low complexity (AC:L), requires no authentication (PR:N), no user interaction (UI:N), and impacts confidentiality to a limited extent (VC:L) but not integrity or availability. The vendor has not responded to disclosure requests, and no patches are currently available. Although no known exploits in the wild have been reported, public disclosure of exploit details increases the risk of exploitation by local attackers or insiders. The vulnerability primarily threatens confidentiality by exposing live video streams to unauthorized viewers, potentially compromising sensitive surveillance data. The lack of authentication enforcement could also facilitate lateral movement within networks. The attack surface is limited to local network access, which reduces remote exploitation risk but highlights the importance of internal network security controls.

Detailed information about CVE-2025-14746: Improper Authentication in Ningyuanda TC155 affecting Ningyuanda TC155. Get real-time updates, technical details, and

CVE-2025-14746: Improper Authentication in Ningyuanda TC155 - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-14746: Improper Authentication in Ningyuanda TC155

Threats Tagged 'cve-2025-14746'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-14746'

Lead Pen Test Professional