Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

AlienVault OTX General

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

GCP Compute Engine Security

JVN Japan

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

The Admin and Site Enhancements (ASE) WordPress plugin before 7.9.8 does not sanitise SVG files when uploaded via xmlrpc.php when such uploads are enabled, which could allow users to upload a malicious SVG containing XSS payloads

CVE-2025-9487 is a medium-severity vulnerability affecting the Admin and Site Enhancements (ASE) WordPress plugin versions prior to 7.9.8. The vulnerability arises due to improper sanitization of SVG files uploaded via the xmlrpc.php interface when such uploads are enabled. SVG files can contain embedded scripts or malicious payloads, and without proper sanitization, these can lead to Cross-Site Scripting (XSS) attacks categorized under CWE-79. Specifically, an authenticated user with high privileges (as indicated by the CVSS vector requiring PR:H) can upload a crafted SVG file containing malicious JavaScript code. When this SVG is rendered or processed by the WordPress site, the embedded XSS payload can execute in the context of the site, potentially compromising confidentiality, integrity, and availability of the affected system. The attack vector is network-based (AV:N), does not require user interaction (UI:N), and the scope remains unchanged (S:U). Although the CVSS score is 4.7 (medium), the vulnerability can facilitate further attacks such as session hijacking, privilege escalation, or defacement if exploited. The lack of sanitization specifically via xmlrpc.php is notable because xmlrpc.php is often targeted for abuse due to its remote access capabilities. No known exploits are currently reported in the wild, and no official patches are linked yet, but the vulnerability is publicly disclosed and should be addressed promptly.

Detailed information about CVE-2025-9487: CWE-79 Cross-Site Scripting (XSS) in Admin and Site Enhancements (ASE) affecting null Admin and Site Enhancements (ASE

CVE-2025-9487: CWE-79 Cross-Site Scripting (XSS) in Admin and Site Enhancements (ASE) - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-9487: CWE-79 Cross-Site Scripting (XSS) in Admin and Site Enhancements (ASE)

Threats Tagged 'cve-2025-9487'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-9487'

Lead Pen Test Professional