Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit NetSec

Reddit Cybersecurity

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Cross Site Request Forgery vulnerability in Dolibarr ERP & CRM v.22.0.9 allows a remote attacker to escalate privileges via the notes field in perms.php NOTE: this is disputed by a third party who indicates that exploitation can only occur if an unprivileged user knows the token of an admin user.

CVE-2025-69634 is a critical security vulnerability classified as a Cross Site Request Forgery (CSRF) affecting Dolibarr ERP & CRM version 22.0.9. The flaw resides in the perms.php component, specifically via the notes field, which an attacker can exploit to escalate privileges remotely. CSRF vulnerabilities allow attackers to trick authenticated users into submitting unauthorized requests, potentially leading to unauthorized actions. In this case, the attacker targets the privilege escalation mechanism, which could grant them elevated access rights within the ERP/CRM system. However, there is a dispute from a third party indicating that exploitation may require the attacker to know the admin user's CSRF token, which would limit the attack vector to scenarios where such tokens are leaked or exposed. The vulnerability is associated with CWE-352 (CSRF), CWE-598 (Information Exposure), and CWE-284 (Improper Access Control), highlighting issues with request forgery, token management, and access control enforcement. The CVSS v3.1 score of 9.0 reflects a critical severity due to the network attack vector, low attack complexity, required privileges at a low level, user interaction, and a scope change affecting confidentiality, integrity, and availability. No patches or known exploits are currently available, but the vulnerability's presence in a widely used ERP/CRM platform makes it a significant concern for organizations relying on Dolibarr for business operations.

Detailed information about CVE-2025-69634: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2025-69634: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-69634: n/a

Threats Tagged 'cve-2025-69634'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-69634'

Lead Pen Test Professional