Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

AlienVault OTX General

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit NetSec

Reddit Cybersecurity

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Unitree Go1 <= Go1_2022_05_11 is vulnerable to Insecure Permissions as the firmware update functionality (via Wi-Fi/Ethernet) implements an insecure verification mechanism that solely relies on MD5 checksums for firmware integrity validation.

CVE-2025-45467 identifies a security vulnerability in the Unitree Go1 robotic platform, specifically affecting firmware versions up to Go1_2022_05_11. The vulnerability arises from the firmware update mechanism, which relies solely on MD5 checksums to verify the integrity of firmware images transmitted over Wi-Fi or Ethernet. MD5 is a cryptographically broken and unsuitable hash function for security purposes due to its susceptibility to collision attacks, where an attacker can craft malicious firmware that produces the same MD5 hash as a legitimate update. This insecure verification mechanism means that an attacker with network access could potentially replace or inject malicious firmware onto the device without detection. The firmware update process lacks stronger cryptographic protections such as digital signatures or more secure hash functions (e.g., SHA-256), which would ensure authenticity and integrity. Exploiting this vulnerability could allow an attacker to gain control over the robot's operations, manipulate its behavior, or use it as a foothold within a network. Although no known exploits are currently reported in the wild, the fundamental weakness in the update verification process presents a significant risk, especially as robotic platforms like Unitree Go1 are increasingly deployed in research, industrial, and commercial environments. The lack of a CVSS score indicates that this vulnerability is newly published and has not yet been fully assessed for severity, but the technical details suggest a critical security flaw in the update mechanism.

Detailed information about CVE-2025-45467: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2025-45467: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-45467: n/a

Threats Tagged 'cve-2025-45467'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-45467'

Lead Pen Test Professional