Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

The system exposes several endpoints, typically including "/int/" in their path, that should be restricted to internal services, but are instead publicly accessible without authentication to any host able to reach the application server on port 443/tcp.

CVE-2025-30037 is a high-severity vulnerability affecting the CGM CLININET product from CGM. The core issue is a missing authentication mechanism for critical internal endpoints, specifically those with paths containing "/int/". These endpoints are intended to be accessible only by internal services but are instead exposed publicly over HTTPS (port 443/tcp) without any authentication or access control. This misconfiguration or design flaw allows any remote attacker who can reach the application server to interact with these sensitive endpoints. The vulnerability is classified under CWE-306, which denotes missing authentication for critical functions, highlighting that the affected endpoints perform sensitive operations that require strict access control. The CVSS 4.0 base score is 8.8 (high), reflecting the vulnerability's significant impact on confidentiality and integrity, with no requirement for privileges or user interaction to exploit. The attack vector is adjacent network, meaning the attacker must have network access to the server but does not require authentication or user involvement. The vulnerability affects all versions indicated as "0" (likely meaning all current versions or an unspecified version). No patches or known exploits in the wild are reported yet. The vulnerability was published in August 2025, with the initial reservation in March 2025. The exposed endpoints could allow attackers to perform unauthorized actions, potentially leading to data leakage, unauthorized data modification, or disruption of internal service operations, severely impacting the confidentiality and integrity of the system and its data.

Detailed information about CVE-2025-30037: CWE-306 Missing Authentication for Critical Function in CGM CGM CLININET affecting CGM CGM CLININET. Get real-time up

CVE-2025-30037: CWE-306 Missing Authentication for Critical Function in CGM CGM CLININET - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-30037: CWE-306 Missing Authentication for Critical Function in CGM CGM CLININET

Threats Tagged 'cve-2025-30037'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-30037'

Lead Pen Test Professional