Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V3.0). The affected application uses a Content Security Policy that allows unsafe script execution methods. This could allow an attacker to execute unauthorized scripts, potentially leading to cross-site scripting attacks.

CVE-2025-40769 is a high-severity vulnerability affecting Siemens SINEC Traffic Analyzer versions prior to 3.0. The core issue stems from the application's Content Security Policy (CSP) configuration, which permits unsafe script execution methods. CSP is a critical security mechanism designed to restrict the sources from which scripts can be loaded and executed, thereby mitigating risks such as cross-site scripting (XSS). In this case, the CSP implementation is flawed, allowing attackers to execute unauthorized scripts within the context of the application. This vulnerability is categorized under CWE-1164, which relates to the inclusion of irrelevant or unsafe code that can be exploited. The CVSS 3.1 score of 7.4 reflects a high impact, with the vector indicating local attack vector (AV:L), high attack complexity (AC:H), no privileges required (PR:N), no user interaction (UI:N), unchanged scope (S:U), and high impact on confidentiality, integrity, and availability (C:H/I:H/A:H). Although exploitation requires local access and is complex, the absence of required privileges and user interaction means that once an attacker gains local access, they can execute arbitrary scripts leading to potentially severe consequences such as data theft, manipulation, or service disruption. Siemens SINEC Traffic Analyzer is a network monitoring and analysis tool primarily used in industrial and critical infrastructure environments to monitor network traffic and diagnose issues. The vulnerability could allow attackers to compromise the integrity and confidentiality of network monitoring data and potentially disrupt network operations.

Detailed information about CVE-2025-40769: CWE-1164: Irrelevant Code in Siemens SINEC Traffic Analyzer affecting Siemens SINEC Traffic Analyzer. Get real-time u

CVE-2025-40769: CWE-1164: Irrelevant Code in Siemens SINEC Traffic Analyzer - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-40769: CWE-1164: Irrelevant Code in Siemens SINEC Traffic Analyzer

Threats Tagged 'cwe-1164'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cwe-1164'

Lead Pen Test Professional