Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Microsoft Security Blog

Google Project Zero

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

PTZOptics and possibly other ValueHD-based pan-tilt-zoom cameras use hard-coded, default administrative credentials. The passwords can readily be cracked. Many cameras have SSH or telnet listening on all interfaces. The passwords cannot be changed by the user, nor can the SSH or telnet service be disabled by the user.

CVE-2025-35451 is a critical vulnerability affecting PTZOptics PT12X-SE-xx-G3 pan-tilt-zoom (PTZ) cameras, which are based on ValueHD technology. The core issue is the use of hard-coded, default administrative credentials embedded in the device firmware. These credentials are static, cannot be changed by the user, and are easily crackable. Furthermore, many of these cameras have SSH and telnet services enabled and listening on all network interfaces by default. Neither the SSH nor the telnet services can be disabled by the user, which significantly increases the attack surface. This vulnerability falls under CWE-798 (Use of Hard-coded Credentials), which is a well-known security weakness that allows attackers to gain unauthorized access to devices. The CVSS v3.1 score of 9.8 (critical) reflects the high impact and ease of exploitation: the vulnerability can be exploited remotely over the network without any authentication or user interaction, leading to full compromise of confidentiality, integrity, and availability of the device. Attackers who successfully exploit this vulnerability can take full control of the camera, potentially intercept video streams, manipulate camera controls, or use the device as a foothold for lateral movement within a network. The inability to change credentials or disable remote access services means that mitigation options are limited and require network-level controls or device replacement. No patches or firmware updates are currently available, and no known exploits are reported in the wild yet, but the severity and ease of exploitation make this a significant threat to organizations using these cameras.

Detailed information about CVE-2025-35451: CWE-798 Use of Hard-coded Credentials in PTZOptics PT12X-SE-xx-G3 affecting PTZOptics PT12X-SE-xx-G3. Get real-time u

CVE-2025-35451: CWE-798 Use of Hard-coded Credentials in PTZOptics PT12X-SE-xx-G3 - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-35451: CWE-798 Use of Hard-coded Credentials in PTZOptics PT12X-SE-xx-G3

Threats Tagged 'cve-2025-35451'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-35451'

Lead Pen Test Professional