Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

GCP Compute Engine Security

JVN Japan

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Microsoft Security Blog

Google Project Zero

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Check Point Research

Kaspersky Security Blog

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Malware

Reddit Reverse Engineering

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

DuraComm SPM-500 DP-10iN-100-MU

 lacks access controls for a function that should require user authentication. This could allow an attacker to repeatedly reboot the device.

CVE-2025-48733 is a high-severity vulnerability identified in the DuraComm Corporation's SPM-500 DP-10iN-100-MU device. The core issue is a missing authentication control (CWE-306) on a critical function that allows an unauthenticated attacker to repeatedly reboot the device remotely. This lack of access control means that the device does not verify the identity or privileges of the entity requesting the reboot function, enabling potential adversaries to disrupt device availability without any credentials or user interaction. The vulnerability has a CVSS 4.0 base score of 8.7, reflecting its network attack vector, low complexity, no privileges or user interaction required, and a high impact on availability. The device in question is likely used in industrial or communication environments given the vendor and product naming conventions, suggesting it may be part of critical infrastructure or operational technology (OT) systems. Repeated reboots can cause denial of service conditions, interrupting normal operations, potentially leading to cascading failures in dependent systems. No patches are currently available, and no known exploits have been reported in the wild, but the ease of exploitation and high impact make this a significant threat. The vulnerability was published recently in July 2025, indicating that organizations using this device should prioritize assessment and mitigation efforts promptly.

Detailed information about CVE-2025-48733: CWE-306 Missing Authentication for Critical Function in DuraComm Corporation SPM-500 DP-10iN-100-MU affecting DuraCom

CVE-2025-48733: CWE-306 Missing Authentication for Critical Function in DuraComm Corporation SPM-500 DP-10iN-100-MU - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-48733: CWE-306 Missing Authentication for Critical Function in DuraComm Corporation SPM-500 DP-10iN-100-MU

Threats Tagged 'cve-2025-48733'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-48733'

Lead Pen Test Professional