Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit NetSec

Reddit Cybersecurity

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

Bleeping Computer

GCVE Database

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

MicroServer copies parts of the system firmware to an unencrypted external SD card on boot, which contains user and vendor secrets. An attacker can utilize these plaintext secrets to modify the vendor firmware, or gain admin access to the web portal.

CVE-2025-64305 is a vulnerability classified under CWE-313 (Cleartext Storage in a File or on Disk) affecting the Columbia Weather Systems MicroServer product. The issue arises because the MicroServer copies parts of its system firmware, which contain sensitive user and vendor secrets, onto an external SD card in an unencrypted form during the device's boot process. This unprotected storage of secrets on removable media exposes critical information that can be accessed by an attacker with physical or network access to the device or its storage. The exposed secrets can be leveraged to modify the vendor firmware, potentially allowing an attacker to implant malicious code or backdoors. Additionally, the attacker can gain administrative access to the MicroServer’s web portal, which controls device configuration and operation. The CVSS 4.0 score of 7.1 reflects a high severity due to the vulnerability's ability to compromise confidentiality and integrity without requiring authentication or user interaction. The attack vector is adjacent network (AV:A), meaning the attacker must have access to the same network segment or physical access to the device. The vulnerability does not impact availability directly but poses a significant risk to device integrity and confidentiality. No patches or vendor fixes are currently available, and no exploits have been reported in the wild. The vulnerability is particularly concerning for environments where MicroServer devices are used for weather data collection, industrial control, or environmental monitoring, as compromise could lead to falsified data or loss of control over critical infrastructure.

Detailed information about CVE-2025-64305: CWE-313 Cleartext Storage in a File or on Disk in Columbia Weather Systems MicroServer affecting Columbia Weather Sys

CVE-2025-64305: CWE-313 Cleartext Storage in a File or on Disk in Columbia Weather Systems MicroServer - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-64305: CWE-313 Cleartext Storage in a File or on Disk in Columbia Weather Systems MicroServer

Threats Tagged 'cve-2025-64305'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-64305'

Lead Pen Test Professional