Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

In bta_hf_client_cb_init of bta_hf_client_main.cc, there is a possible remote code execution due to a use after free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2025-48593 is a critical remote code execution vulnerability identified in the Bluetooth Hands-Free Profile (HFP) client implementation within Google Android operating system versions 13 through 16. The flaw is a use-after-free condition located in the function bta_hf_client_cb_init within the source file bta_hf_client_main.cc. This type of vulnerability occurs when a program continues to use memory after it has been freed, potentially allowing attackers to manipulate memory and execute arbitrary code. The vulnerability does not require user interaction or elevated privileges beyond low-level access, making it highly exploitable. An attacker within Bluetooth range could exploit this flaw to run malicious code on the affected device, potentially gaining full control over the system. The CVSS v3.1 base score is 8.0, reflecting high impact on confidentiality, integrity, and availability, with attack vector being adjacent network (Bluetooth), low attack complexity, low privileges required, and no user interaction needed. While no public exploits have been reported yet, the vulnerability’s nature and affected Android versions—covering a large portion of deployed devices—make it a critical concern. The vulnerability is categorized under CWE-416 (Use After Free), a common and dangerous memory corruption issue. No patches have been linked yet, indicating that mitigation efforts should be prioritized once updates are released. The Bluetooth HFP client is widely used for hands-free calling and audio device connectivity, making this vulnerability relevant for both consumer and enterprise Android devices.

Detailed information about CVE-2025-48593: Remote code execution in Google Android affecting Google Android. Get real-time updates, technical details, and mitig

CVE-2025-48593: Remote code execution in Google Android - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-48593: Remote code execution in Google Android

Threats Tagged 'cve-2025-48593'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-48593'

Lead Pen Test Professional