Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

GCP Compute Engine Security

JVN Japan

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Microsoft Security Blog

Google Project Zero

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Check Point Research

Kaspersky Security Blog

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

The web portal on airpointer 2.4.107-2 was vulnerable local file inclusion. A malicious user with administrative privileges in the web portal would be able to manipulate requests to view files on the filesystem

CVE-2025-4634 is a vulnerability identified in the JCT Airpointer product, specifically version 2.4.107-2. The vulnerability is classified under CWE-552, which pertains to files or directories being accessible to external parties. The technical issue arises from a local file inclusion (LFI) flaw in the web portal component of Airpointer. An attacker who already possesses administrative privileges within the web portal can exploit this vulnerability by manipulating requests to access arbitrary files on the underlying filesystem. This could allow the attacker to read sensitive configuration files, logs, or other data stored on the server that should not be exposed. The CVSS v3.1 base score is 4.1, indicating a medium severity level. The vector string (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N) shows that the attack can be performed remotely over the network (AV:N) with low attack complexity (AC:L), but requires high privileges (PR:H) and no user interaction (UI:N). The scope is changed (S:C), meaning the vulnerability affects resources beyond the initially vulnerable component. The impact is limited to confidentiality (C:L), with no impact on integrity or availability. No known exploits are currently reported in the wild, and no patches have been linked yet. This vulnerability is significant because it allows an authenticated administrator to escalate their access to sensitive files, potentially exposing critical data or credentials that could facilitate further attacks or data breaches.

Detailed information about CVE-2025-4634: CWE-552 Files or Directories Accessible to External Parties in JCT Airpointer affecting JCT Airpointer. Get real-time 

CVE-2025-4634: CWE-552 Files or Directories Accessible to External Parties in JCT Airpointer - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-4634: CWE-552 Files or Directories Accessible to External Parties in JCT Airpointer

Threats Tagged 'cve-2025-4634'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-4634'

Lead Pen Test Professional