Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

small-http

Problem in the Small HTTP Server v3.06.36 service. An authenticated path traversal vulnerability in '/' allows remote users to bypass the intended restrictions of SecurityManager and display any file if they have the appropriate permissions outside the document root configured on the server.

CVE-2025-41368 is a vulnerability identified in Small HTTP Server version 3.06.36, specifically related to an unquoted service path in the Windows service configuration for the executable located at 'C:\Program Files (x86)\shttps_mg\http.exe service'. The issue arises because the service path is not enclosed in quotation marks, which causes Windows to interpret the path incorrectly when searching for the executable to run. This misinterpretation allows a local attacker to place a malicious executable with the same name as the service executable in a directory that is searched earlier in the system's PATH environment variable or in a directory higher in the hierarchy, such as 'C:\Program Files (x86)\shttps_mg\http.exe' being interpreted as 'C:\Program.exe' if unquoted. When the service starts, it may execute the attacker's malicious executable instead of the legitimate one. This vulnerability is classified under CWE-428 (Unquoted Search Path or Element) and can lead to arbitrary code execution with the privileges of the service, unauthorized access, or denial of service. The CVSS 4.0 score is 8.5 (high severity), reflecting the ease of exploitation by a local attacker with low privileges and the high impact on confidentiality, integrity, and availability. No user interaction or elevated privileges beyond local access are required, and no known exploits have been reported in the wild as of now. The vulnerability highlights the importance of secure service path configuration and proper quoting in Windows environments to prevent path hijacking attacks.

Detailed information about CVE-2025-41368: CWE-428 Unquoted search path or element in Smallsrv Small HTTP affecting Smallsrv Small HTTP. Get real-time updates, 

CVE-2025-41368: CWE-428 Unquoted search path or element in Smallsrv Small HTTP - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-41368: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Smallsrv Small HTTP

Threats Tagged 'cve-2025-41368'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-41368'

Lead Pen Test Professional