Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

key-manager

An improper access control vulnerability exists in multiple WSO2 products due to insufficient permission enforcement in certain internal SOAP Admin Services and System REST APIs. A low-privileged user may exploit this flaw to perform unauthorized operations, including accessing server-level information.

This vulnerability affects only internal administrative interfaces. APIs exposed through the WSO2 API Manager's API Gateway remain unaffected.

CVE-2025-9804 is an improper access control vulnerability identified in multiple versions of WSO2 Identity Server when used as a Key Manager (versions 5.3.0 through 5.10.0). The flaw arises from insufficient permission enforcement in certain internal SOAP Admin Services and System REST APIs, which are intended for administrative use only. This weakness allows a low-privileged user—without authentication or user interaction—to perform unauthorized operations, including accessing sensitive server-level information that should be restricted. The vulnerability specifically targets internal administrative interfaces and does not affect the APIs exposed through the WSO2 API Manager's API Gateway, which remain secure. The vulnerability is classified under CWE-284 (Improper Access Control) and has a CVSS v3.1 base score of 9.6, indicating critical severity. The attack vector is adjacent network (AV:A), with low attack complexity (AC:L), no privileges required (PR:N), and no user interaction (UI:N). The scope is changed (S:C), meaning the vulnerability affects resources beyond the initially vulnerable component. Confidentiality, integrity, and availability impacts are all rated high, highlighting the potential for significant damage if exploited. Although no known exploits are currently reported in the wild, the critical nature of the flaw and the broad range of affected versions necessitate urgent attention. The vulnerability was publicly disclosed on October 16, 2025, with the initial reservation on September 1, 2025. No patches were listed at the time of disclosure, indicating that organizations must monitor vendor updates closely. The vulnerability is particularly concerning for environments where WSO2 Identity Server is deployed as a key management solution, as unauthorized access to administrative interfaces could lead to compromise of cryptographic keys, identity data, and overall system control.

Detailed information about CVE-2025-9804: Vulnerability in WSO2 WSO2 Identity Server as Key Manager affecting WSO2 WSO2 Identity Server as Key Manager. Get real

CVE-2025-9804: Vulnerability in WSO2 WSO2 Identity Server as Key Manager - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-9804: Vulnerability in WSO2 WSO2 Identity Server as Key Manager

Threats Tagged 'cve-2025-9804'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-9804'

Lead Pen Test Professional