Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Krebs on Security

Palo Alto Unit 42

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Unitree Go2, G1, H1, and B2 devices through 2025-09-20 allow root OS command injection via the hostapd_restart.sh wifi_ssid or wifi_pass parameter (within restart_wifi_ap and restart_wifi_sta).

CVE-2025-60017 is a high-severity vulnerability affecting Unitree robotic devices including the Go2, G1, H1, and B2 models. The flaw is an OS command injection (CWE-78) occurring in the hostapd_restart.sh script, specifically via the wifi_ssid or wifi_pass parameters used in the restart_wifi_ap and restart_wifi_sta functions. These parameters are not properly sanitized, allowing an attacker to inject arbitrary OS commands that execute with root privileges. The vulnerability is remotely exploitable (Attack Vector: Adjacent Network) but requires high attack complexity and no user interaction. The scope is changed (S:C), meaning the vulnerability can affect resources beyond the initially vulnerable component. The CVSS 3.1 base score is 8.2, reflecting low confidentiality impact but high integrity and availability impacts due to root-level command execution. This could allow an attacker to take full control of the device, disrupt its operation, or pivot into connected networks. No known exploits have been reported in the wild yet, and no patches are currently available. The vulnerability was published shortly after being reserved in late September 2025, indicating recent discovery. Unitree devices are advanced robotic platforms often used in research, industrial automation, and potentially security-sensitive environments, making this vulnerability particularly concerning due to the elevated privileges and potential for lateral movement within networks.

Detailed information about CVE-2025-60017: CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in Unitree Go2 affe

CVE-2025-60017: CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in Unitree Go2 - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-60017: CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in Unitree Go2

Threats Tagged 'cve-2025-60017'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-60017'

Lead Pen Test Professional