Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

wekan

An issue was discovered in Wekan The Open Source kanban board system up to version 18.15, fixed in 18.16. Uploaded attachments can be served with attacker-controlled Content-Type (text/html), allowing execution of attacker-supplied HTML/JS in the application's origin and enabling session/token theft and CSRF actions.

CVE-2025-65778 is a vulnerability identified in Wekan, an open-source kanban board system widely used for task and project management. The issue exists in versions up to 18.15 and was resolved in version 18.16. The core of the vulnerability lies in the handling of uploaded attachments: Wekan improperly allows the Content-Type header of these attachments to be attacker-controlled and set to text/html. This misconfiguration enables an attacker to upload malicious HTML or JavaScript code that executes within the security context (origin) of the Wekan application. Such execution constitutes a stored cross-site scripting (XSS) attack, classified under CWE-79. The consequences include theft of session tokens or authentication tokens, enabling attackers to hijack user sessions. Additionally, the attacker can perform cross-site request forgery (CSRF) actions, potentially manipulating user actions without their consent. The vulnerability is remotely exploitable over the network (AV:N), requires no privileges (PR:N), but does require user interaction (UI:R), such as a user opening or interacting with the malicious attachment. The scope is unchanged (S:U), and the impact on confidentiality and integrity is high (C:H/I:H), while availability is not affected (A:N). No known exploits are currently reported in the wild, but the high CVSS score of 8.1 indicates a serious risk. The vulnerability highlights the importance of strict validation and sanitization of user-uploaded content and proper Content-Type enforcement to prevent script execution in web applications.

Detailed information about CVE-2025-65778: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2025-65778: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-65778: n/a

Threats Tagged 'cve-2025-65778'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-65778'

Lead Pen Test Professional