Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Krebs on Security

Palo Alto Unit 42

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

A stack-based buffer overflow exists in the GoAhead-Webs HTTP daemon on KuWFi 4G LTE AC900 devices with firmware 1.0.13. The /goform/formMultiApnSetting handler uses sprintf() to copy the user-supplied pincode parameter into a fixed 132-byte stack buffer with no bounds checks. This allows an attacker to corrupt adjacent stack memory, crash the web server, and (under certain conditions) may enable arbitrary code execution.

CVE-2025-68706 is a stack-based buffer overflow vulnerability identified in the GoAhead-Webs HTTP daemon component embedded within KuWFi 4G LTE AC900 devices running firmware version 1.0.13. The vulnerability arises from improper handling of the 'pincode' parameter in the /goform/formMultiApnSetting HTTP handler. Specifically, the code uses the unsafe sprintf() function to copy the user-supplied 'pincode' string into a fixed-size 132-byte stack buffer without performing any bounds checking. This lack of validation allows an attacker to supply an overly long input, overflowing the buffer and overwriting adjacent stack memory. The consequences of this overflow include potential corruption of control data such as return addresses or function pointers, which can lead to denial of service via server crashes or, under certain conditions, arbitrary code execution. The vulnerability is remotely exploitable over the network without requiring authentication or user interaction, as the HTTP daemon listens for incoming requests. The CVSS v3.1 base score is 9.8 (critical), reflecting the high impact on confidentiality, integrity, and availability, combined with low attack complexity and no privileges required. Although no public exploits have been reported yet, the vulnerability poses a significant risk to affected devices. The GoAhead-Webs HTTP daemon is a widely used embedded web server in IoT and networking devices, and KuWFi 4G LTE AC900 is a device commonly deployed in LTE networking scenarios. The vulnerability is categorized under CWE-121 (stack-based buffer overflow), a well-known class of memory corruption bugs that are often leveraged for remote code execution. The absence of available patches at the time of disclosure necessitates urgent mitigation actions.

Detailed information about CVE-2025-68706: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2025-68706: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-68706: n/a

Threats Tagged 'cve-2025-68706'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-68706'

Lead Pen Test Professional