Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

AWS Security Bulletins

GCP Kubernetes Security

CERT/CC

Tenable Research

Microsoft Security Blog

Google Project Zero

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

The PPPoE configuration interface of the Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model MT02) is vulnerable to command injection via the 'user' parameter. Input is processed unsafely during network setup, allowing attackers to execute arbitrary system commands with root privileges.

The Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model MT02) contains a critical OS command injection vulnerability identified as CVE-2025-34150. The vulnerability exists in the PPPoE configuration interface, specifically in the handling of the 'user' parameter. During network setup, this parameter is processed without proper input validation or sanitization, allowing an attacker to inject malicious shell commands. Because the commands execute with root privileges, an attacker can gain full control over the device remotely without any authentication or user interaction. The vulnerability is classified under CWE-78 (Improper Neutralization of Special Elements used in an OS Command), indicating that special characters or command sequences are not properly neutralized before execution. The CVSS 4.0 vector indicates an attack vector of adjacent network (AV:A), low attack complexity (AC:L), no privileges required (PR:N), no user interaction (UI:N), and high impact on confidentiality, integrity, and availability (VC:H/VI:H/VA:H). This means an attacker within the local network or connected via PPPoE can exploit this flaw easily to compromise the device. Once exploited, the attacker can execute arbitrary commands, potentially leading to device takeover, network disruption, data interception, or lateral movement within the network. No patches or firmware updates have been published yet, and no active exploitation has been reported. The vulnerability affects all versions of the M300 Wi-Fi Repeater, making all deployed devices vulnerable. This issue poses a significant risk to network security, especially in environments relying on these repeaters for connectivity.

Detailed information about CVE-2025-34150: CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in Shenzhen Aitemi 

CVE-2025-34150: CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in Shenzhen Aitemi E Commerce Co. Ltd. M300 Wi-Fi Repeater - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-34150: CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in Shenzhen Aitemi E Commerce Co. Ltd. M300 Wi-Fi Repeater

Threats Tagged 'cve-2025-34150'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-34150'

Lead Pen Test Professional