Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Reolink desktop application 8.18.12 contains a command injection vulnerability in its scheduled cache-clearing mechanism via a crafted folder name. NOTE: this is disputed by the Supplier because a crafted folder name would arise only if the local user were attacking himself.

CVE-2025-56799 identifies a command injection vulnerability in the Reolink desktop application version 8.18.12, specifically within its scheduled cache-clearing mechanism. The vulnerability stems from improper handling of folder names that are used in command execution contexts, classified under CWE-77 (Improper Neutralization of Special Elements used in a Command). An attacker who can create or manipulate folder names processed by the cache-clearing routine could inject arbitrary commands executed with the privileges of the application. The supplier disputes the exploitability, noting that such crafted folder names would only be possible if the local user attacks themselves, implying that remote exploitation or exploitation by an unprivileged external attacker is unlikely. The CVSS 3.1 base score is 6.5 (medium), with vector AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N, indicating network attack vector, low attack complexity, no privileges or user interaction required, and impact limited to confidentiality and integrity. No known exploits have been reported in the wild, and no patches are currently available. The vulnerability highlights a risk in the way the application handles scheduled maintenance tasks that involve filesystem operations and command execution, which could be leveraged by an attacker with local or network access to the system running the application. The lack of authentication requirement increases the theoretical risk, but practical exploitation is limited by the need to influence folder names processed by the cache-clearing mechanism.

Detailed information about CVE-2025-56799: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2025-56799: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-56799: n/a

Threats Tagged 'cve-2025-56799'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-56799'

Lead Pen Test Professional