Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Krebs on Security

Palo Alto Unit 42

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Arris VIP1113 devices through 2025-05-30 with KreaTV SDK allow file overwrite via TFTP because a remote filename with a space character allows an attacker to control the local filename.

CVE-2025-49162 is a vulnerability identified in the Arris VIP1113 device, which utilizes the KreaTV SDK. The issue arises due to improper protection of alternate file paths (CWE-424) during TFTP (Trivial File Transfer Protocol) operations. Specifically, the vulnerability allows an attacker to perform a file overwrite by exploiting the handling of remote filenames containing space characters. When a remote filename includes a space, the device's TFTP implementation incorrectly processes the filename, enabling the attacker to control the local filename used during the file transfer. This flaw can be leveraged to overwrite arbitrary files on the device's filesystem remotely without requiring authentication or user interaction. The vulnerability has a CVSS 3.1 base score of 6.4, indicating a medium severity level. The vector metrics show that the attack requires physical proximity or network access (Attack Vector: Physical), high attack complexity, no privileges required, no user interaction, and impacts confidentiality, integrity, and availability to a high degree. The vulnerability was published on June 2, 2025, and no known exploits have been reported in the wild yet. The absence of patches or mitigation links suggests that the vendor has not yet released an official fix. The root cause is the improper handling of alternate file paths during TFTP file transfers, which is a common protocol used for device configuration and firmware updates. Exploiting this vulnerability could allow attackers to overwrite critical system files, potentially leading to device compromise, denial of service, or persistent unauthorized access.

Detailed information about CVE-2025-49162: CWE-424 Improper Protection of Alternate Path in Arris VIP1113 affecting Arris VIP1113. Get real-time updates, techni

CVE-2025-49162: CWE-424 Improper Protection of Alternate Path in Arris VIP1113 - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-49162: CWE-424 Improper Protection of Alternate Path in Arris VIP1113

Threats Tagged 'cve-2025-49162'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-49162'

Lead Pen Test Professional