Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit NetSec

Reddit Cybersecurity

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

Bleeping Computer

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

A security vulnerability has been detected in Tenda AC18 15.03.05.05. The impacted element is the function strcpy of the file /goform/GetParentControlInfo of the component HTTP Request Handler. The manipulation of the argument mac leads to stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used.

CVE-2025-14992 is a stack-based buffer overflow vulnerability identified in the Tenda AC18 router firmware version 15.03.05.05. The vulnerability resides in the HTTP request handler component, specifically in the strcpy function used in the /goform/GetParentControlInfo endpoint. The flaw arises from improper validation or bounds checking of the 'mac' parameter passed to strcpy, allowing an attacker to overflow the stack buffer. This overflow can corrupt adjacent memory, potentially enabling remote code execution or denial of service. The vulnerability is remotely exploitable over the network without requiring authentication or user interaction, making it highly dangerous. The CVSS 4.0 vector indicates network attack vector (AV:N), low attack complexity (AC:L), no privileges required (PR:L), no user interaction (UI:N), and high impact on confidentiality, integrity, and availability (VC:H/VI:H/VA:H). Although no known exploits are currently observed in the wild, the public disclosure of exploit code raises the likelihood of imminent attacks. The lack of official patches or mitigation guidance from the vendor increases the urgency for organizations to implement compensating controls. This vulnerability affects a widely used consumer and small business router model, which could be targeted for network infiltration, data interception, or lateral movement within compromised networks.

Detailed information about CVE-2025-14992: Stack-based Buffer Overflow in Tenda AC18 affecting Tenda AC18. Get real-time updates, technical details, and mitigat

CVE-2025-14992: Stack-based Buffer Overflow in Tenda AC18 - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-14992: Stack-based Buffer Overflow in Tenda AC18

Threats Tagged 'cve-2025-14992'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-14992'

Lead Pen Test Professional