Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

titra

Titra is open source project time tracking software. Prior to version 0.99.49, Titra allows any authenticated Admin user to modify the timeEntryRule in the database. The value is then passed to a NodeVM value to execute as code. Without sanitization, it leads to a Remote Code Execution. Version 0.99.49 fixes the issue.

CVE-2025-69288 is a critical vulnerability identified in the open-source project time tracking software Titra, developed by kromitgmbh. The issue exists in versions prior to 0.99.49 and is classified under CWE-20 (Improper Input Validation). The vulnerability allows any authenticated user with admin privileges to modify the timeEntryRule field stored in the database. This field's value is subsequently passed directly into a NodeVM environment for execution as code. Because the input is not sanitized or validated properly before execution, this creates a remote code execution (RCE) vector. An attacker with admin access can craft malicious input to execute arbitrary code on the server hosting Titra, potentially leading to full system compromise. The vulnerability has a CVSS v3.1 base score of 9.1, reflecting its critical nature, with attack vector being network-based (AV:N), low attack complexity (AC:L), requiring high privileges (PR:H), no user interaction (UI:N), and impacting confidentiality, integrity, and availability (C:H/I:H/A:H). The scope is changed (S:C), meaning the vulnerability affects resources beyond the initially vulnerable component. Although no public exploits are reported yet, the flaw's nature makes it a high-risk issue, especially in environments where admin credentials may be compromised or misused. The fix was introduced in version 0.99.49 by sanitizing inputs or changing how timeEntryRule is handled to prevent code injection. Organizations using Titra should prioritize upgrading to this patched version to eliminate the vulnerability.

Detailed information about CVE-2025-69288: CWE-20: Improper Input Validation in kromitgmbh titra affecting kromitgmbh titra. Get real-time updates, technical de

CVE-2025-69288: CWE-20: Improper Input Validation in kromitgmbh titra - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-69288: CWE-20: Improper Input Validation in kromitgmbh titra

Threats Tagged 'cve-2025-69288'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-69288'

Lead Pen Test Professional