Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

A reflected cross-site scripting (XSS) vulnerability exists in FuguHub 8.1 when serving SVG files through the /fs/ file manager interface. FuguHub does not sanitize or restrict script execution inside SVG content. When a victim opens a crafted SVG containing an inline <script> element, the browser executes the attacker-controlled JavaScript.

CVE-2025-65790 is a reflected cross-site scripting (XSS) vulnerability found in FuguHub version 8.1, specifically within the /fs/ file manager interface that serves SVG files. The root cause is the lack of sanitization or restriction on script execution inside SVG content. SVG files can contain embedded JavaScript within <script> elements, and FuguHub fails to neutralize or block these scripts when serving SVGs. Consequently, when a victim user opens a maliciously crafted SVG file, the browser executes the embedded attacker-controlled JavaScript code. This can lead to various malicious outcomes, including session hijacking, theft of sensitive information, unauthorized actions on behalf of the user, or further exploitation of the victim’s browser environment. The vulnerability is reflected, meaning the malicious payload is delivered via a crafted URL or file that the victim must open. There is no CVSS score assigned yet, and no public exploits have been reported. However, the vulnerability is significant because SVG files are commonly used and trusted, and many browsers support inline scripting within SVGs. The lack of input validation or output encoding in FuguHub’s file manager interface increases the attack surface. This vulnerability affects organizations using FuguHub 8.1 for file sharing or management, potentially exposing internal users or external collaborators to attack if they open malicious SVG files. The vulnerability was reserved in November 2025 and published in December 2025, indicating recent discovery. No patches or fixes are currently linked, so mitigation relies on configuration changes and user awareness until official updates are released.

Detailed information about CVE-2025-65790: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2025-65790: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-65790: n/a

Threats Tagged 'cve-2025-65790'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-65790'

Lead Pen Test Professional