Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

Threatpost

SecurityWeek

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

A vulnerability was found in Netgear WNR614 1.1.0.28_1.0.1WW. It has been classified as critical. This affects an unknown part of the component URL Handler. The manipulation with the input %00currentsetting.htm leads to improper authentication. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This issue appears to have been circulating as an 0day since 2024.

CVE-2025-5495 is a vulnerability identified in the Netgear WNR614 router, specifically version 1.1.0.28_1.0.1WW. The flaw resides in the URL Handler component of the device's firmware, where improper handling of a crafted input string containing the null byte sequence "%00currentsetting.htm" leads to improper authentication bypass. This vulnerability allows an unauthenticated remote attacker to access restricted functionality or sensitive configuration pages without valid credentials. The issue is exploitable remotely over the network without requiring any user interaction or prior authentication, increasing the attack surface significantly. Although the exact internal mechanism is not fully detailed, the presence of the null byte (%00) suggests a classic null byte injection or truncation attack that bypasses authentication checks by manipulating URL parsing or access control logic. The vulnerability has been publicly disclosed and was circulating as a zero-day since early 2024, indicating that threat actors may have had extended opportunity to develop exploits. The CVSS v4.0 base score is 6.9, categorized as medium severity, reflecting the network attack vector, no required privileges or user interaction, but limited impact on confidentiality, integrity, and availability (each rated low). No official patches or mitigations have been linked yet, and no known exploits in the wild have been confirmed at the time of publication. This vulnerability could allow attackers to gain unauthorized access to router settings, potentially leading to further compromise such as network traffic interception, device configuration changes, or pivoting attacks within the affected network environment.

Detailed information about CVE-2025-5495: Improper Authentication in Netgear WNR614 affecting Netgear WNR614. Get real-time updates, technical details, and miti

CVE-2025-5495: Improper Authentication in Netgear WNR614 - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-5495: Improper Authentication in Netgear WNR614

Threats Tagged 'cve-2025-5495'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-5495'

Lead Pen Test Professional