Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

The affected products contain JSON Web Tokens (JWT) that do not expire, which could allow an attacker to gain access to the system.

CVE-2025-49152 is a high-severity vulnerability affecting Microsens NMP Web+, a network management platform. The core issue is the use of JSON Web Tokens (JWTs) that do not expire, constituting an instance of CWE-613: Insufficient Session Expiration. JWTs are commonly used for stateless authentication, where a token encodes user identity and authorization claims. Proper security practice mandates that these tokens have a limited lifetime to reduce the risk of unauthorized access if tokens are leaked or stolen. In this case, the affected Microsens NMP Web+ versions issue JWTs without any expiration mechanism, meaning once a token is issued, it remains valid indefinitely unless explicitly revoked. This flaw allows an attacker who obtains a valid JWT—via interception, theft, or other means—to maintain persistent access to the system without re-authentication. The CVSS 3.1 base score of 8.7 reflects the vulnerability's characteristics: it is remotely exploitable over the network without authentication or user interaction, has low attack complexity, and can lead to high impact on confidentiality and integrity by granting unauthorized access. The vulnerability does not affect availability or require privileges, making it particularly dangerous in environments where the NMP Web+ platform manages critical network infrastructure. No known exploits are currently reported in the wild, but the simplicity of exploitation and severity suggest it is a prime target for attackers once discovered. No patches or mitigations have been officially released yet, increasing the urgency for organizations to implement compensating controls.

Detailed information about CVE-2025-49152: CWE-613 in MICROSENS NMP Web+ affecting MICROSENS NMP Web+. Get real-time updates, technical details, and mitigation 

CVE-2025-49152: CWE-613 in MICROSENS NMP Web+ - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-49152: CWE-613 Insufficient Session Expiration in Microsens NMP Web+

Threats Tagged 'cve-2025-49152'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-49152'

Lead Pen Test Professional