Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit NetSec

Reddit Cybersecurity

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

rise-crm-framework

HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection due to lack of proper validation of user inputs by sending a POST request in parameter 'title' in'/projects/save'.

CVE-2025-41101 is an HTML injection vulnerability classified under CWE-79 (Improper Neutralization of Input During Web Page Generation), affecting Fairsketch's RISE CRM Framework versions prior to 3.9. The vulnerability occurs because the application fails to properly validate or sanitize user-supplied input in the 'title' parameter of the /projects/save endpoint, which accepts POST requests. This improper input handling allows an attacker to inject arbitrary HTML or JavaScript code into the web page generated by the CRM, leading to a cross-site scripting (XSS) attack. The CVSS 4.0 base score is 5.1 (medium severity), with an attack vector of network (AV:N), low attack complexity (AC:L), no privileges required (PR:L), and user interaction required (UI:P). The vulnerability does not affect confidentiality, integrity, or availability directly but can lead to session hijacking, credential theft, or unauthorized actions by executing malicious scripts in the victim's browser context. No known exploits are currently reported in the wild, but the vulnerability is publicly disclosed and should be addressed promptly. The lack of a patch at the time of publication means organizations must implement interim mitigations. The vulnerability's scope is limited to the RISE CRM Framework, a specialized CRM product by Fairsketch, which is used primarily in project and customer management scenarios.

Detailed information about CVE-2025-41101: CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') in Fairsketch RISE

CVE-2025-41101: CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') in Fairsketch RISE CRM Framework - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-41101: CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') in Fairsketch RISE CRM Framework

Threats Tagged 'cve-2025-41101'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-41101'

Lead Pen Test Professional