Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

AlienVault OTX General

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit NetSec

Reddit Cybersecurity

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

The OceanWP WordPress theme before 4.1.2 is vulnerable to an option update due to a missing capability check on one of its AJAX request handler, allowing any authenticated users, such as subscriber to update the darkMod` setting.

CVE-2025-8944 is a medium-severity vulnerability affecting the OceanWP WordPress theme versions prior to 4.1.2. The issue stems from an incorrect authorization check (CWE-863) in one of the theme's AJAX request handlers. Specifically, the handler responsible for updating theme options does not properly verify user capabilities before processing the request. As a result, any authenticated user, including low-privileged roles such as subscribers, can update the 'darkMod' setting of the theme. This setting likely controls the dark mode appearance of the website. The vulnerability does not allow unauthenticated users to exploit it, but any logged-in user can leverage this flaw without requiring additional user interaction. The CVSS 3.1 base score is 4.3, reflecting a low complexity attack vector (network), low attack complexity, and requiring only low privileges but no user interaction. The impact is limited to integrity, as attackers can modify a theme option but cannot affect confidentiality or availability. There are no known exploits in the wild at the time of publication, and no official patches or updates are linked yet, though the fixed version is 4.1.2 or later. This vulnerability is significant because WordPress powers a large number of websites globally, and OceanWP is a popular theme, meaning many sites could be affected if they run outdated versions. Attackers exploiting this flaw could manipulate the site's appearance or potentially use the altered settings as a stepping stone for further attacks, such as social engineering or phishing by changing UI elements.

Detailed information about CVE-2025-8944: CWE-863 Incorrect Authorization in OceanWP affecting null OceanWP. Get real-time updates, technical details, and mitig

CVE-2025-8944: CWE-863 Incorrect Authorization in OceanWP - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-8944: CWE-863 Incorrect Authorization in OceanWP

Threats Tagged 'cve-2025-8944'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-8944'

Lead Pen Test Professional