Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

AWS Security Bulletins

GCP Kubernetes Security

CERT/CC

Tenable Research

Microsoft Security Blog

Google Project Zero

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

swingmusic

Swing Music is a self-hosted music player for local audio files. Prior to version 2.1.4, Swing Music's `list_folders()` function in the `/folder/dir-browser` endpoint is vulnerable to directory traversal attacks. Any authenticated user (including non-admin) can browse arbitrary directories on the server filesystem. Version 2.1.4 fixes the issue.

CVE-2026-23877 is a directory traversal vulnerability classified under CWE-25 and CWE-284 affecting the Swing Music self-hosted music player software. The vulnerability resides in the list_folders() function exposed via the /folder/dir-browser endpoint. Prior to version 2.1.4, this function does not properly sanitize user input, allowing authenticated users to manipulate the directory path parameter to traverse outside the intended music directories using sequences like '/../'. This enables attackers with valid credentials to access arbitrary directories on the underlying server filesystem. Although the vulnerability requires authentication, it does not require elevated privileges or user interaction beyond login. The exposure primarily risks confidentiality as attackers can read sensitive files outside the application scope but cannot modify or delete files. The CVSS 4.0 base score is 5.3 (medium severity) reflecting network attack vector, low attack complexity, and limited scope impact confined to confidentiality. No known exploits are currently reported in the wild. The issue is resolved in Swing Music version 2.1.4 by implementing proper input validation and path normalization to prevent directory traversal. Organizations running vulnerable versions should upgrade immediately to mitigate risk.

Detailed information about CVE-2026-23877: CWE-25: Path Traversal: '/../filedir' in swingmx swingmusic affecting swingmx swingmusic. Get real-time updates, tech

CVE-2026-23877: CWE-25: Path Traversal: '/../filedir' in swingmx swingmusic - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-23877: CWE-25: Path Traversal: '/../filedir' in swingmx swingmusic

Riello UPS NetMan 208 Application before 1.12 allows cgi-bin/certsupload.cgi /../ directory traversal for file upload with resultant code execution.

CVE-2025-68916 is a critical security vulnerability identified in the Riello UPS NetMan 208 Application versions prior to 1.12. The flaw is a path traversal vulnerability classified under CWE-25, which occurs in the cgi-bin/certsupload.cgi CGI script responsible for handling certificate uploads. Specifically, the vulnerability allows an authenticated user with high privileges to manipulate the file upload path using '/../' sequences to traverse directories outside the intended upload folder. This directory traversal can be exploited to overwrite or upload malicious files to arbitrary locations on the device's filesystem. Given that the device processes these files, this can lead to arbitrary code execution, allowing an attacker to execute commands with the privileges of the application or system. The CVSS v3.1 base score of 9.1 reflects the critical nature of this vulnerability, with an attack vector over the network, low attack complexity, and no user interaction required. However, it does require high privileges (PR:H), meaning the attacker must already have authenticated access with elevated rights. The vulnerability impacts confidentiality, integrity, and availability, as an attacker could gain control over the device, potentially disrupting UPS management and monitoring functions. No public exploits are currently known, but the vulnerability's characteristics make it a significant risk, especially in environments relying on Riello UPS devices for critical power management. The lack of available patches at the time of reporting increases the urgency for organizations to implement compensating controls.

Detailed information about CVE-2025-68916: CWE-25 Path Traversal: '/../filedir' in Riello NetMan affecting Riello NetMan. Get real-time updates, technical detai

CVE-2025-68916: CWE-25 Path Traversal: '/../filedir' in Riello NetMan - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-68916: CWE-25 Path Traversal: '/../filedir' in Riello NetMan

Denial of service (DoS) vulnerability in the office service. Successful exploitation of this vulnerability may affect availability.

CVE-2025-58286 is a path traversal vulnerability classified under CWE-25 found in the office service component of Huawei's HarmonyOS versions 5.0.1 and 5.1.0. This vulnerability allows an attacker to manipulate file paths by injecting '/../filedir' sequences, enabling traversal outside the intended directory boundaries. The primary impact is a denial of service (DoS), as successful exploitation can disrupt the availability of the office service. The CVSS 3.1 score is 3.3, indicating low severity, with an attack vector limited to local access (AV:L), low attack complexity (AC:L), no privileges required (PR:N), but requiring user interaction (UI:R). The scope remains unchanged (S:U), and the impact is limited to availability (A:L) without affecting confidentiality or integrity. No known exploits have been reported in the wild, and no patches have been released at the time of publication. The vulnerability arises from insufficient validation of file path inputs, allowing directory traversal sequences to be processed improperly. This can cause the service to malfunction or crash, leading to denial of service conditions. Given the nature of the vulnerability, exploitation requires an attacker to have local access and induce a user action, limiting remote exploitation potential. The lack of patches necessitates vigilance and interim protective measures until official fixes are available.

Detailed information about CVE-2025-58286: CWE-25 Path Traversal: '/../filedir' in Huawei HarmonyOS affecting Huawei HarmonyOS. Get real-time updates, technical


CVE-2026-23877: CWE-25: Path Traversal: '/../filedir' in swingmx swingmusicCVE-2026-23877 0 Swing Music is a self-hosted music player for local audio files. Prior to version 2.1.4, Swing Music's `list_folders()` function in the `/folder/dir-browser` endpoint is vulnerable to directory traversal attacks. Any authenticated user (including non-admin) can browse arbitrary directories on the server filesystem. Version 2.1.4 fixes the issue. MediumVulnerabilityGermanyFranceUnited Kingdom+7#cve #cve-2026-23877 #cwe-25 Join the discussion	CVE Database V5	01/19/2026, 20:52:00 UTC Added: 01/19/2026, 21:05:55 UTC
CVE-2025-68916: CWE-25 Path Traversal: '/../filedir' in Riello NetManCVE-2025-68916 0 Riello UPS NetMan 208 Application before 1.12 allows cgi-bin/certsupload.cgi /../ directory traversal for file upload with resultant code execution. CriticalVulnerabilityItalyGermanyFrance+3#cve #cve-2025-68916 #cwe-25 Join the discussion	CVE Database V5	12/24/2025, 19:43:25 UTC Added: 12/24/2025, 19:54:54 UTC
CVE-2025-58286: CWE-25 Path Traversal: '/../filedir' in Huawei HarmonyOSCVE-2025-58286 0 Denial of service (DoS) vulnerability in the office service. Successful exploitation of this vulnerability may affect availability. LowVulnerabilityGermanyFranceUnited Kingdom+4#cve #cve-2025-58286 #cwe-25 Join the discussion	CVE Database V5	10/11/2025, 08:43:00 UTC Added: 10/11/2025, 08:56:17 UTC

Threats Tagged 'cwe-25'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cwe-25'

Lead Pen Test Professional