Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit NetSec

Reddit Cybersecurity

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

Bleeping Computer

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

AVideo

An incomplete blacklist exists in the .htaccess sample of WWBN AVideo 14.4 and dev master commit 8a8954ff. A specially crafted HTTP request can lead to a arbitrary code execution. An attacker can request a .phar file to trigger this vulnerability.

CVE-2025-48732 is a vulnerability identified in WWBN AVideo version 14.4 and a development master commit (8a8954ff), stemming from an incomplete blacklist implemented in the .htaccess sample configuration file. The .htaccess file is intended to restrict access to certain file types to prevent unauthorized execution or exposure. However, the blacklist does not fully cover all potentially dangerous file extensions, specifically allowing .phar files to be requested. PHAR (PHP Archive) files can contain serialized PHP objects and code, which when improperly handled by the web server or application, can lead to deserialization vulnerabilities and arbitrary code execution. An attacker can craft an HTTP request targeting a .phar file hosted or accessible via the AVideo platform, bypassing the incomplete blacklist and triggering execution of malicious code embedded within the .phar archive. This attack does not require any authentication or user interaction, making it remotely exploitable over the network. The vulnerability affects confidentiality, integrity, and availability because arbitrary code execution can lead to data theft, manipulation, or service disruption. The CVSS 3.1 score of 7.3 reflects the network attack vector, low attack complexity, no privileges or user interaction required, and impacts across all three security properties. No public exploits or active exploitation have been reported yet, but the vulnerability is publicly disclosed and should be addressed proactively. The root cause is the misconfiguration or insufficient filtering in the .htaccess file, which is a common security control for Apache-based web servers hosting PHP applications. Remediation involves correcting the blacklist to fully block .phar files or other dangerous extensions, and applying secure coding and deployment practices to prevent deserialization attacks.

Detailed information about CVE-2025-48732: CWE-184: Incomplete Blacklist in WWBN AVideo affecting WWBN AVideo. Get real-time updates, technical details, and mit

CVE-2025-48732: CWE-184: Incomplete Blacklist in WWBN AVideo - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-48732: CWE-184: Incomplete Blacklist in WWBN AVideo

Threats Tagged 'cve-2025-48732'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-48732'

Lead Pen Test Professional