Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

AWS Security Bulletins

GCP Kubernetes Security

CERT/CC

Tenable Research

Microsoft Security Blog

Google Project Zero

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

The firmware update functionality does not verify the authenticity of the supplied firmware update files. This allows attackers to flash malicious firmware update files on the device. Initial analysis of the firmware update functionality does not show any cryptographic checks (e.g.digital signature checks) on the supplied firmware update files. Furthermore, ESP32 security features such as secure boot are not used.

CVE-2025-15575 is a vulnerability identified in the firmware update process of the SolaX Power Pocket WiFi 3.0 device, specifically in versions earlier than 3.022.03. The core issue is the absence of integrity and authenticity verification for firmware update files. The device's firmware update functionality does not perform cryptographic checks such as digital signature validation, allowing attackers to supply and flash malicious firmware images. This vulnerability is categorized under CWE-494 (Download of Code Without Integrity Check). Additionally, the device does not leverage ESP32 platform security features like secure boot, which would normally prevent unauthorized firmware from running. The vulnerability has a CVSS v3.1 base score of 5.3 (medium severity), with an attack vector of network (AV:N), low attack complexity (AC:L), no privileges required (PR:N), no user interaction (UI:N), unchanged scope (S:U), no confidentiality impact (C:N), integrity impact (I:L), and no availability impact (A:N). This means an attacker can remotely and easily exploit the vulnerability without authentication or user action to modify the device's firmware, potentially leading to persistent control or manipulation of device functions. No public exploits or patches are currently available, but the vendor is expected to release updates to address this issue. The vulnerability affects a specific product line widely used in certain markets for portable WiFi connectivity, making it a concern for organizations deploying these devices in their networks.

Detailed information about CVE-2025-15575: CWE-494 Download of Code Without Integrity Check in SolaX Power Pocket WiFi 3.0 affecting SolaX Power Pocket WiFi 3.0

CVE-2025-15575: CWE-494 Download of Code Without Integrity Check in SolaX Power Pocket WiFi 3.0 - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-15575: CWE-494 Download of Code Without Integrity Check in SolaX Power Pocket WiFi 3.0

Threats Tagged 'cve-2025-15575'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-15575'

Lead Pen Test Professional