Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Use of implicit intent for sensitive communication in Samsung Notes prior to version 4.4.30.63 allows local attackers to access shared notes.

CVE-2025-21057 is a vulnerability classified under CWE-927 (Use of Implicit Intent for Sensitive Communication) affecting Samsung Notes on Samsung Mobile devices prior to version 4.4.30.63. The issue arises because the application uses implicit intents to share sensitive note data, which can be intercepted or accessed by unauthorized local applications or attackers with local device access. Implicit intents in Android allow communication between components without specifying the exact recipient, which can lead to unintended data exposure if sensitive information is shared this way. In this case, local attackers can exploit this design flaw to access shared notes, compromising confidentiality. The CVSS v3.1 base score is 4.0, indicating medium severity, with attack vector limited to local (AV:L), low attack complexity (AC:L), no privileges required (PR:N), no user interaction (UI:N), and impact limited to confidentiality (C:L) without affecting integrity or availability. The vulnerability does not require authentication or user interaction, increasing the risk in environments where local access is possible. There are no known exploits in the wild, and no official patches have been linked yet, but the vendor has reserved the CVE and published the vulnerability details. This vulnerability highlights the risks of improper intent usage in Android apps handling sensitive data.

Detailed information about CVE-2025-21057: CWE-927: Use of Implicit Intent for Sensitive Communication in Samsung Mobile Samsung Notes affecting Samsung Mobile 

CVE-2025-21057: CWE-927: Use of Implicit Intent for Sensitive Communication in Samsung Mobile Samsung Notes - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-21057: CWE-927: Use of Implicit Intent for Sensitive Communication in Samsung Mobile Samsung Notes

Improper access control in Samsung Notes prior to version 4.4.30.63 allows local privileged attackers to access exported note files. User interaction is required for triggering this vulnerability.

CVE-2025-21036 is a medium-severity vulnerability identified in Samsung Notes, a widely used note-taking application on Samsung mobile devices. The vulnerability stems from improper access control related to the use of implicit intents for sensitive communication within the application. Specifically, prior to version 4.4.30.63, Samsung Notes improperly exposes exported note files to local privileged attackers. This means that an attacker with some level of local privilege on the device can exploit this flaw to access sensitive note files that should otherwise be protected. The vulnerability requires user interaction to be triggered, indicating that the attacker must convince or trick the user into performing an action that initiates the exploit. The CVSS 3.1 base score is 5.0, reflecting a medium severity level, with the vector indicating local attack vector (AV:L), low attack complexity (AC:L), requiring privileges (PR:L), user interaction (UI:R), unchanged scope (S:U), high confidentiality impact (C:H), no integrity impact (I:N), and no availability impact (A:N). The underlying weakness is categorized under CWE-927, which relates to the use of implicit intents for sensitive communication, a common Android security issue where intents are not explicitly targeted, potentially allowing unauthorized apps or processes to intercept or access sensitive data. No known exploits have been reported in the wild, and no patch links are provided in the data, but the issue is addressed in Samsung Notes version 4.4.30.63 and later. This vulnerability primarily affects Samsung mobile devices running vulnerable versions of Samsung Notes, exposing sensitive user data to local attackers who have gained some level of device access, such as through other privilege escalation vulnerabilities or physical access.

Detailed information about CVE-2025-21036: CWE-927: Use of Implicit Intent for Sensitive Communication in Samsung Mobile Samsung Notes affecting Samsung Mobile 

CVE-2025-21036: CWE-927: Use of Implicit Intent for Sensitive Communication in Samsung Mobile Samsung Notes - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-21036: CWE-927: Use of Implicit Intent for Sensitive Communication in Samsung Mobile Samsung Notes

Use of Implicit Intent for Sensitive Communication in Smart View prior to Android 16 allows local attackers to access sensitive information.

CVE-2025-21024 is a vulnerability identified in Samsung Mobile's Smart View application, specifically affecting versions prior to Android 16. The issue stems from the use of implicit intents for sensitive communication within the app. Implicit intents in Android allow components to request actions from other components without specifying the exact target, which can lead to unintended recipients receiving sensitive data. In this case, local attackers with limited privileges (PR:L) can exploit this design flaw to access sensitive information transmitted via these implicit intents. The vulnerability does not require user interaction (UI:N) and has a low attack complexity (AC:L), but the attack vector is local (AV:L), meaning the attacker must have local access to the device. The impact is limited to confidentiality (C:L) with no impact on integrity or availability. No known exploits are currently in the wild, and no patches have been linked yet. The vulnerability is classified under CWE-927, which relates to the use of implicit intent for sensitive communication, highlighting a design weakness in inter-component communication security within the Android ecosystem. The CVSS score is 3.3, indicating a low severity level, reflecting the limited scope and impact of the vulnerability.

Detailed information about CVE-2025-21024: CWE-927: Use of Implicit Intent for Sensitive Communication in Samsung Mobile Smart View affecting Samsung Mobile Sma

CVE-2025-21024: CWE-927: Use of Implicit Intent for Sensitive Communication in Samsung Mobile Smart View - Live Threat Intelligence - Threat Radar | OffSeq.com


CVE-2025-21057: CWE-927: Use of Implicit Intent for Sensitive Communication in Samsung Mobile Samsung NotesCVE-2025-21057 0 Use of implicit intent for sensitive communication in Samsung Notes prior to version 4.4.30.63 allows local attackers to access shared notes. MediumVulnerabilityGermanyFranceUnited Kingdom+4#cve #cve-2025-21057 #cwe-927 Join the discussion	CVE Database V5	10/10/2025, 06:33:15 UTC Added: 10/10/2025, 06:45:14 UTC
CVE-2025-21036: CWE-927: Use of Implicit Intent for Sensitive Communication in Samsung Mobile Samsung NotesCVE-2025-21036 0 Improper access control in Samsung Notes prior to version 4.4.30.63 allows local privileged attackers to access exported note files. User interaction is required for triggering this vulnerability. MediumVulnerabilityGermanyFranceUnited Kingdom+7#cve #cve-2025-21036 #cwe-927 Join the discussion	CVE Database V5	09/03/2025, 06:05:41 UTC Added: 09/03/2025, 06:17:51 UTC
CVE-2025-21024: CWE-927: Use of Implicit Intent for Sensitive Communication in Samsung Mobile Smart ViewCVE-2025-21024 0 Use of Implicit Intent for Sensitive Communication in Smart View prior to Android 16 allows local attackers to access sensitive information. LowVulnerabilityGermanyFranceUnited Kingdom+5#cve #cve-2025-21024 #cwe-927 Join the discussion	CVE Database V5	08/06/2025, 04:23:42 UTC Added: 08/06/2025, 04:47:47 UTC

Threats Tagged 'cwe-927'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cwe-927'

Lead Pen Test Professional