Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Microsoft Security Blog

Google Project Zero

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

cacti

A HTML injection vulnerability exists in the file upload functionality of Cacti <= 1.2.29. When a file with an invalid format is uploaded, the application reflects the submitted filename back into an error popup without proper sanitization. As a result, attackers can inject arbitrary HTML elements (e.g., <h1>, <b>, <svg>) into the rendered page. NOTE: Multiple third-parties including the maintainer have stated that they cannot reproduce this issue after 1.2.27.

CVE-2025-45160 identifies an HTML injection vulnerability in the widely used network monitoring tool Cacti, specifically in versions up to 1.2.29. The vulnerability occurs within the file upload feature when a user attempts to upload a file with an invalid format. Instead of properly sanitizing the filename before displaying it in an error popup, the application reflects the raw filename back into the HTML response. This lack of sanitization allows attackers to inject arbitrary HTML elements such as <h1>, <b>, or <svg> tags into the rendered page. While this is not a classic cross-site scripting (XSS) vulnerability, it can be leveraged to manipulate the page content, potentially misleading users or enabling further attacks if combined with other vulnerabilities. The CVSS score of 5.4 reflects a medium severity, with the vector indicating network attack vector (AV:N), low attack complexity (AC:L), requiring privileges (PR:L), no user interaction (UI:N), unchanged scope (S:U), and limited confidentiality and integrity impact (C:L/I:L). Notably, multiple third parties and the Cacti maintainer have stated that the issue could not be reproduced after version 1.2.27, implying that fixes or changes in later versions may have mitigated or eliminated the vulnerability. No public exploits have been reported, reducing immediate risk. The vulnerability is classified under CWE-80 (Improper Neutralization of Script-Related HTML Tags in a Web Page), emphasizing the importance of input sanitization. Since Cacti is often deployed in network monitoring environments, exploitation could allow attackers to inject misleading content into the monitoring interface, potentially obscuring alerts or causing confusion among administrators. However, the impact on system availability is negligible, and exploitation requires at least low-level privileges on the network, limiting the attack surface.

Detailed information about CVE-2025-45160: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2025-45160: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-45160: n/a

Threats Tagged 'cve-2025-45160'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-45160'

Lead Pen Test Professional