Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Krebs on Security

Palo Alto Unit 42

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Incorrect access control in the RTMP server settings of Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime - firmware v3.0.0.4662_2503122283 allows unauthorized attackers to cause a Denial of Service (DoS) via initiating a large number of simultaneous ffmpeg-based stream pushes.

CVE-2025-55634 is a vulnerability identified in the RTMP server settings of the Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime, specifically in firmware version 3.0.0.4662_2503122283. The flaw stems from incorrect access control mechanisms within the RTMP server configuration, which allows unauthorized attackers to exploit the device by initiating a large number of simultaneous ffmpeg-based stream pushes. This results in a Denial of Service (DoS) condition, effectively overwhelming the device's streaming capabilities and rendering it unavailable or unresponsive. The vulnerability does not require authentication, meaning any attacker with network access to the device can attempt exploitation. The attack leverages ffmpeg, a widely used multimedia framework, to push multiple streams concurrently, exploiting the device's insufficient restrictions on stream initiation. No CVSS score has been assigned yet, and no known exploits have been reported in the wild. The lack of patch links suggests that a fix may not yet be publicly available or disclosed. This vulnerability primarily impacts the availability of the affected device, disrupting its core functionality as a video doorbell and potentially causing broader network disruptions if the device is part of a larger security or IoT ecosystem.

Detailed information about CVE-2025-55634: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2025-55634: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-55634: n/a

Threats Tagged 'cve-2025-55634'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-55634'

Lead Pen Test Professional