Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Krebs on Security

Palo Alto Unit 42

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Malware

Reddit Reverse Engineering

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

A remote command injection vulnerability exists in the confirm.php interface of the WIFISKY 7-layer Flow Control Router via a specially-crafted HTTP GET request to the t parameter. Insufficient input validation allows unauthenticated attackers to execute arbitrary OS commands. Exploitation evidence was observed by the Shadowserver Foundation on 2025-01-25 UTC.

CVE-2025-34044 is a remote command injection vulnerability identified in the confirm.php interface of the WIFISKY 7-layer flow control router developed by Shenzhen Lingkong Technology. The vulnerability stems from improper neutralization of special elements in the 't' parameter of HTTP GET requests, classified under CWE-78. Due to insufficient input validation, unauthenticated attackers can craft malicious HTTP requests that inject arbitrary OS commands, which the router executes with elevated privileges. This can lead to full compromise of the device, allowing attackers to manipulate network traffic, exfiltrate sensitive data, disrupt services, or pivot into internal networks. The vulnerability has been assigned a CVSS 4.0 score of 9.4, reflecting its critical severity with network attack vector, low attack complexity, no authentication required, and no user interaction needed. Exploitation evidence was observed by the Shadowserver Foundation on January 25, 2025, indicating active reconnaissance or attack attempts in the wild, although no confirmed widespread exploitation is reported yet. The affected product is the WIFISKY 7-layer flow control router, with no specific version details beyond '0' provided, suggesting the vulnerability may affect all current versions. The lack of available patches at the time of publication increases the urgency for defensive measures. This vulnerability poses a significant threat to network security, especially in environments relying on these routers for traffic management and flow control.

Detailed information about CVE-2025-34044: CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in Shenzhen Lingkon

CVE-2025-34044: CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in Shenzhen Lingkong Technology WIFISKY 7-layer flow control router - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-34044: CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in Shenzhen Lingkong Technology WIFISKY 7-layer flow control router

Threats Tagged 'cve-2025-34044'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-34044'

Lead Pen Test Professional