Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Krebs on Security

Palo Alto Unit 42

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Improper Hardware reset flow logic in the GPU GFX Hardware IP block could allow a privileged attacker in a guest virtual machine to control reset operation potentially causing host or GPU crash or reset resulting in denial of service.

CVE-2025-48508 is a hardware logic vulnerability classified under CWE-1245, relating to improper finite state machines (FSMs) in the AMD Radeon™ PRO V710 GPU. Specifically, the issue lies in the hardware reset flow logic within the GPU's GFX Hardware IP block. This improper reset flow allows a privileged attacker operating inside a guest virtual machine to manipulate the reset operation of the GPU. By controlling this reset, the attacker can cause the GPU or the host system to crash or reset unexpectedly, leading to a denial of service condition. The vulnerability requires the attacker to have high privileges within the guest VM, indicating that the attacker must already have significant access to the virtualized environment. The CVSS v3.1 score is 6.0 (medium severity), reflecting that the attack vector is local (AV:L), requires low attack complexity (AC:L), high privileges (PR:H), no user interaction (UI:N), and impacts availability (A:H) with no confidentiality or integrity impact. The scope is changed (S:C), meaning the vulnerability affects components beyond the initially compromised security scope. No patches or exploits are currently reported, but the vulnerability poses a risk to virtualized environments using the affected AMD GPU hardware. The improper FSM logic in hardware is a critical design flaw that cannot be mitigated by software alone, emphasizing the importance of hardware or firmware updates from AMD.

Detailed information about CVE-2025-48508: CWE-1245  Improper Finite State Machines (FSMs) in Hardware Logic in AMD AMD Radeon™ PRO V710 affecting AMD AMD Radeo

CVE-2025-48508: CWE-1245  Improper Finite State Machines (FSMs) in Hardware Logic in AMD AMD Radeon™ PRO V710 - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-48508: CWE-1245  Improper Finite State Machines (FSMs) in Hardware Logic in AMD AMD Radeon™ PRO V710

Dormakaba Saflok System 6000 contains a predictable key generation algorithm that allows attackers to derive card access keys from a 32-bit unique identifier. Attackers can exploit the deterministic key generation process by calculating valid access keys using a simple mathematical transformation of the card's unique identifier.

CVE-2024-58311 affects the Dormakaba Saflok System 6000 due to an improper finite state machine implementation in its hardware logic, specifically a predictable key generation algorithm. The system uses a 32-bit unique identifier to generate card access keys deterministically, enabling attackers to derive valid keys by applying a straightforward mathematical transformation to the identifier. This flaw compromises the confidentiality and integrity of the access control mechanism, potentially allowing unauthorized physical access. The vulnerability has a high CVSS 4.0 score of 8.7, reflecting its severity and ease of exploitation without privileges or user interaction. No patch or vendor advisory is currently available, and the affected product versions are unknown.

Detailed information about CVE-2024-58311: CWE-1245: Improper Finite State Machines (FSMs) in Hardware Logic in dormakaba Dormakaba Saflok System 6000 affecting

CVE-2024-58311: CWE-1245: Improper Finite State Machines (FSMs) in Hardware Logic in dormakaba Dormakaba Saflok System 6000 - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-58311: CWE-1245: Improper Finite State Machines (FSMs) in Hardware Logic in dormakaba Dormakaba Saflok System 6000


CVE-2025-48508: CWE-1245 Improper Finite State Machines (FSMs) in Hardware Logic in AMD AMD Radeon™ PRO V710CVE-2025-48508 0 Improper Hardware reset flow logic in the GPU GFX Hardware IP block could allow a privileged attacker in a guest virtual machine to control reset operation potentially causing host or GPU crash or reset resulting in denial of service. MediumVulnerabilityGermanyFranceUnited Kingdom+3#cve #cve-2025-48508 #cwe-1245 Join the discussion	CVE Database V5	02/11/2026, 14:29:11 UTC Added: 02/11/2026, 15:01:16 UTC
CVE-2024-58311: CWE-1245: Improper Finite State Machines (FSMs) in Hardware Logic in dormakaba Dormakaba Saflok System 6000CVE-2024-58311 0 Dormakaba Saflok System 6000 contains a predictable key generation algorithm that allows attackers to derive card access keys from a 32-bit unique identifier. Attackers can exploit the deterministic key generation process by calculating valid access keys using a simple mathematical transformation of the card's unique identifier. HighVulnerability#cve #cve-2024-58311 #cwe-1245 Join the discussion	CVE Database V5	12/12/2025, 19:57:03 UTC Added: 12/12/2025, 20:08:34 UTC

Threats Tagged 'cwe-1245'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cwe-1245'

Lead Pen Test Professional