Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Configuroweb Sistema Web de Inventario 1.0 is vulnerable to a Stored Cross-Site Scripting (XSS) due to the lack of input sanitization on the product name parameter (Nombre:Producto) allowing an authenticated attacker to inject malicious payloads and execute arbitrary JavaScript.

CVE-2025-60314 identifies a stored Cross-Site Scripting (XSS) vulnerability in Configuroweb Sistema Web de Inventario version 1.0. The vulnerability stems from the lack of proper input sanitization on the product name parameter (Nombre:Producto), which allows an authenticated attacker to inject malicious JavaScript code that is stored persistently on the server. When other users access the affected pages displaying the product name, the injected script executes in their browsers, potentially leading to session hijacking, credential theft, or unauthorized actions within the application. Since the vulnerability requires authentication, attackers must first gain valid credentials, which may limit the attack surface but does not eliminate risk, especially in environments with weak authentication controls or insider threats. No CVSS score is assigned yet, and no public exploits have been reported, indicating it may be newly disclosed or under limited exploitation. The absence of patch links suggests that a fix is not yet publicly available, increasing the urgency for organizations to implement interim mitigations such as input validation and output encoding. The vulnerability affects the confidentiality and integrity of user data and sessions but does not directly impact availability. Stored XSS is particularly dangerous because it can affect multiple users and persist over time, increasing the potential damage. The vulnerability is relevant for any organization using this inventory system, especially those with web-facing interfaces accessible by multiple users.

Detailed information about CVE-2025-60314: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2025-60314: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-60314: n/a

Threats Tagged 'cve-2025-60314'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-60314'

Lead Pen Test Professional