Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Linked URLs during the creation of iFrame widgets and dashboards are vulnerable to code execution. The URLs get embedded as iFrame widgets, making it possible to attack other users that access the dashboard by including malicious code. The attack is only possible if the attacker is authorized to create new dashboards or iFrame widgets.

CVE-2025-49191 is a medium-severity vulnerability affecting all versions of SICK AG's SICK Field Analytics product. The vulnerability arises from improper restriction of rendered UI layers or frames (CWE-1021) during the creation of iFrame widgets and dashboards. Specifically, when users create dashboards or iFrame widgets, linked URLs are embedded as iFrames without sufficient validation or sanitization. This flaw enables an authorized attacker—someone with permission to create new dashboards or iFrame widgets—to embed malicious code within these iFrames. When other users access the compromised dashboards, the malicious code executes in their browsers, potentially leading to unauthorized actions such as session hijacking, credential theft, or further client-side attacks. The attack requires that the attacker be authenticated with privileges to create dashboards or widgets, and user interaction is necessary to trigger the malicious code execution (i.e., the victim must access the compromised dashboard). The vulnerability has a CVSS 3.1 base score of 4.8, reflecting network attack vector, low attack complexity, high privileges required, user interaction required, and partial impact on confidentiality and integrity but no impact on availability. No known exploits are currently reported in the wild, and no patches have been released yet. The vulnerability affects all versions of the product, indicating a need for immediate mitigation and monitoring until a fix is available.

Detailed information about CVE-2025-49191: CWE-1021 Improper Restriction of Rendered UI Layers or Frames in SICK AG SICK Field Analytics affecting SICK AG SICK 

CVE-2025-49191: CWE-1021 Improper Restriction of Rendered UI Layers or Frames in SICK AG SICK Field Analytics - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-49191: CWE-1021 Improper Restriction of Rendered UI Layers or Frames in SICK AG SICK Field Analytics

Threats Tagged 'cve-2025-49191'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-49191'

Lead Pen Test Professional