Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Microsoft Security Blog

Google Project Zero

Cisco Talos

Zero Day Initiative

Krebs on Security

Palo Alto Unit 42

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Malware

Reddit Reverse Engineering

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

In Agora Foundation Agora fall23-Alpha1 before 690ce56, there is XSS via a profile picture to server/controller/userController.js. Formats other than PNG, JPEG, and WEBP are permitted by server/routes/userRoutes.js; this includes SVG.

CVE-2025-55135 is a medium severity vulnerability identified in the Agora Foundation's Agora product, specifically in versions prior to commit 690ce56 of the fall23-Alpha1 release. The vulnerability is classified under CWE-434, which pertains to the unrestricted upload of files with dangerous types. The core issue arises from the server-side handling of profile picture uploads in the userController.js component. While the application intends to restrict uploaded image formats to PNG, JPEG, and WEBP, the server/routes/userRoutes.js file permits additional formats, including SVG. SVG files can contain embedded scripts, making them a vector for Cross-Site Scripting (XSS) attacks. This discrepancy allows an attacker to upload a malicious SVG file as a profile picture, which, when rendered in a victim's browser, can execute arbitrary JavaScript code. The CVSS v3.1 score is 6.4, indicating a medium severity level. The attack vector is network-based (AV:N), with low attack complexity (AC:L), requiring low privileges (PR:L), and no user interaction (UI:N). The scope is changed (S:C), meaning the vulnerability affects resources beyond the initially vulnerable component. The impact affects confidentiality and integrity at a low level but does not impact availability. No known exploits are currently reported in the wild, and no patches are linked yet, indicating that remediation may still be in progress or pending release. This vulnerability can be exploited by authenticated users with the ability to upload profile pictures, enabling them to inject malicious scripts that could compromise other users' sessions or steal sensitive information when those users view the malicious profile picture.

Detailed information about CVE-2025-55135: CWE-434 Unrestricted Upload of File with Dangerous Type in Agora Foundation Agora affecting Agora Foundation Agora. G

CVE-2025-55135: CWE-434 Unrestricted Upload of File with Dangerous Type in Agora Foundation Agora - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-55135: CWE-434 Unrestricted Upload of File with Dangerous Type in Agora Foundation Agora

Threats Tagged 'cve-2025-55135'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-55135'

Lead Pen Test Professional