Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Zero Day Initiative

Cisco Talos

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Use of fixed learning codes, one code to lock the car and the other code to unlock it, the Key Fob Transmitter in KIA-branded Aftermarket Generic Smart  Keyless Entry System, primarily distributed in Ecuador, which allows a replay attack.

Manufacture is unknown at the time of release.  CVE Record will be updated once this is clarified.

CVE-2025-6029 is a critical vulnerability identified in the KIA-branded Aftermarket Generic Smart Keyless Entry System, specifically affecting key fobs distributed primarily in Ecuador for the 2022 and 2023 versions. The core technical issue stems from the use of fixed learning codes—one code for locking and another for unlocking the vehicle. This design flaw violates secure authentication principles by allowing replay attacks, where an attacker can capture and retransmit these fixed codes to gain unauthorized access to the vehicle. The vulnerability is classified under CWE-307 (Improper Restriction of Excessive Authentication Attempts) and CWE-294 (Authentication Bypass by Capture-Replay), indicating that the system neither limits repeated authentication attempts nor employs dynamic or rolling codes to prevent replay. The CVSS 4.0 score of 9.4 (critical) reflects the high impact and ease of exploitation: the attack vector is adjacent (likely requiring proximity), no privileges or user interaction are needed, and the vulnerability affects confidentiality, integrity, and availability at a high level. The lack of authentication requirement and the absence of user interaction make this vulnerability particularly dangerous for vehicle owners. Although the manufacturer of the aftermarket system is currently unknown, the vulnerability affects KIA-branded key fobs, which suggests a supply chain or third-party component risk. No patches or known exploits in the wild have been reported yet, but the critical severity and straightforward attack method imply a high risk of exploitation once publicized. The vulnerability's technical details emphasize the systemic failure to restrict excessive authentication attempts and the use of static codes, which are outdated and insecure for keyless entry systems.

Detailed information about CVE-2025-6029: CWE-307 Improper Restriction of Excessive Authentication Attempts in KIA Aftermarket Generic Smart Keyless Entry Syste

CVE-2025-6029: CWE-307 Improper Restriction of Excessive Authentication Attempts in KIA Aftermarket Generic Smart Keyless Entry System - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-6029: CWE-307 Improper Restriction of Excessive Authentication Attempts in KIA Aftermarket Generic Smart Keyless Entry System

Threats Tagged 'cve-2025-6029'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-6029'

Lead Pen Test Professional