Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Kalmia

Kalmia CMS version 0.2.0 contains a user enumeration vulnerability in its authentication mechanism. The application returns different error messages for invalid users (user_not_found) versus valid users with incorrect passwords (invalid_password). This observable response discrepancy allows unauthenticated attackers to enumerate valid usernames on the system.

CVE-2025-65899 identifies a user enumeration vulnerability in the authentication mechanism of Kalmia CMS version 0.2.0. The core issue arises because the system returns different error messages depending on whether the username is invalid (user_not_found) or the password is incorrect (invalid_password). This behavior allows an unauthenticated attacker to distinguish valid usernames from invalid ones by observing the system's responses during login attempts. User enumeration vulnerabilities fall under CWE-204 and are significant because they can provide attackers with a list of valid usernames, which can then be used to launch more focused attacks such as password guessing, credential stuffing, or social engineering. The vulnerability has a CVSS v3.1 base score of 5.3, indicating medium severity. The vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N shows that the attack can be performed remotely over the network without privileges or user interaction, and it impacts confidentiality to a limited extent by revealing valid usernames. There is no impact on integrity or availability. No patches or fixes are currently linked, and no known exploits have been reported in the wild as of the publication date (December 4, 2025). The vulnerability is particularly relevant for organizations that rely on Kalmia CMS for web content management and have public-facing login portals, as attackers can leverage this flaw to gather intelligence on valid user accounts.

Detailed information about CVE-2025-65899: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2025-65899: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-65899: n/a

Threats Tagged 'cve-2025-65899'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-65899'

Lead Pen Test Professional