Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

Kaspersky Security Blog

Reddit NetSec

Check Point Research

AlienVault OTX General

Reddit InfoSec News

SecurityWeek

Threatpost

Exploit-DB RSS Feed

The Hacker News

CIRCL OSINT Feed

ThreatFox MISP Feed

SANS ISC Handlers Diary

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Chrome version 143 has been released with patches addressing 13 vulnerabilities, including a high-severity flaw in the V8 JavaScript engine. This flaw could potentially allow attackers to execute arbitrary code or cause denial of service through crafted JavaScript. Although no known exploits are currently reported in the wild, the vulnerability's high severity indicates significant risk if left unpatched. The V8 engine is integral to Chrome's JavaScript execution, making this a critical component to secure. European organizations relying heavily on Chrome for web browsing and web-based applications could face risks to confidentiality, integrity, and availability if exploited. Immediate patching is recommended to mitigate potential attacks. Countries with high Chrome usage and significant web infrastructure are more likely to be targeted. The threat does not require user interaction beyond visiting a malicious webpage, increasing its risk profile. Defenders should prioritize updating Chrome installations and monitoring for suspicious activity related to JavaScript execution anomalies.

Google Chrome 143 stable release addresses 13 vulnerabilities, notably a high-severity flaw in the V8 JavaScript engine, which is responsible for executing JavaScript code within the browser. This vulnerability could allow an attacker to execute arbitrary code remotely by convincing a user to visit a malicious website or interact with crafted web content. The flaw likely involves memory corruption or logic errors within V8, enabling exploitation without requiring user authentication or complex interaction beyond normal browsing. While no exploits have been observed in the wild yet, the high severity classification suggests that the vulnerability could lead to significant compromise, including unauthorized code execution, data leakage, or browser crashes causing denial of service. The absence of detailed CVE or CVSS data limits precise technical characterization, but the involvement of the JavaScript engine and the number of patched vulnerabilities highlight the critical nature of this update. The patch release underscores the importance of timely updates to mitigate risks inherent in widely used browser components.

Detailed information about Chrome 143 Patches High-Severity Vulnerabilities. Get real-time updates, technical details, and mitigation strategies.

Chrome 143 Patches High-Severity Vulnerabilities - Live Threat Intelligence - Threat Radar | OffSeq.com

Original Source

Chrome 143 Patches High-Severity Vulnerabilities

CVE-2025-13472 is a medium severity vulnerability in the Perforce BlazeMeter Jenkins Plugin that allowed unauthorized users to view sensitive resource lists such as credential IDs and workspace/project IDs via the Jenkins UI. This issue was due to missing authorization checks prior to version 4. 27, enabling any Jenkins user to access these dropdown lists without proper permissions. The vulnerability does not require user interaction or authentication and has a CVSS score of 5. 3, indicating moderate risk. Although no known exploits are reported in the wild, the exposure of credential identifiers and project information could aid attackers in reconnaissance and subsequent attacks. The fix restricts visibility of these resources to users with appropriate permissions. European organizations using Jenkins with BlazeMeter integrations should prioritize updating to the fixed version to prevent information disclosure. Countries with significant Jenkins and Perforce usage, such as Germany, the UK, France, and the Netherlands, are more likely to be impacted due to their large software development sectors. Mitigation involves upgrading the plugin, reviewing Jenkins user permissions, and monitoring access logs for unusual activity.

CVE-2025-13472 is a vulnerability classified under CWE-862 (Missing Authorization) found in the Perforce BlazeMeter Jenkins Plugin prior to version 4.27. The issue arises because the plugin did not enforce proper authorization checks when displaying lists of sensitive resources such as credential IDs, BlazeMeter workspaces, and project IDs within the Jenkins user interface. As a result, any user with access to the Jenkins UI could view these resource identifiers in dropdown menus, regardless of their permission level. This unauthorized visibility could facilitate information gathering by malicious insiders or external attackers who have limited access to Jenkins, potentially enabling further attacks such as credential theft or targeted exploitation of exposed projects. The vulnerability has a CVSS 4.0 base score of 5.3, reflecting a medium severity level due to its network attack vector, low complexity, no required privileges, and no user interaction needed. The scope is limited to information disclosure (confidentiality impact is low), with no direct impact on integrity or availability. The vendor addressed the issue in BlazeMeter Jenkins Plugin version 4.27 by restricting resource visibility only to users with appropriate permissions. No public exploits have been reported to date, but the vulnerability remains a concern for organizations relying on Jenkins and BlazeMeter for continuous integration and testing workflows. The flaw underscores the critical need for proper authorization enforcement in CI/CD plugins to prevent leakage of sensitive configuration data that could be leveraged in multi-stage attacks.

Detailed information about CVE-2025-13472: CWE-862 Missing Authorization in Perforce BlazeMeter affecting Perforce BlazeMeter. Get real-time updates, technical 

CVE-2025-13472: CWE-862 Missing Authorization in Perforce BlazeMeter - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-13472: CWE-862 Missing Authorization in Perforce BlazeMeter

A flaw was found in the ABRT daemon’s handling of user-supplied mount information.ABRT copies up to 12 characters from an untrusted input and places them directly into a shell command (docker inspect %s) without proper validation. An unprivileged local user can craft a payload that injects shell metacharacters, causing the root-running ABRT process to execute attacker-controlled commands and ultimately gain full root privileges.

CVE-2025-12744 is an OS command injection vulnerability found in the ABRT (Automatic Bug Reporting Tool) daemon, specifically in how it processes user-supplied mount information. The ABRT daemon copies up to 12 characters from an untrusted input and inserts them directly into a shell command, specifically 'docker inspect %s', without proper sanitization or validation of special shell characters. This improper neutralization allows an unprivileged local user to craft malicious input containing shell metacharacters that get executed by the root-privileged ABRT process. As a result, the attacker can execute arbitrary commands with root privileges, effectively escalating their privileges from a limited user to full system administrator. The vulnerability requires local access with low privileges but does not require user interaction, making it easier to exploit once local access is obtained. The CVSS 3.1 score of 8.8 reflects the high impact on confidentiality, integrity, and availability, as well as the relatively low complexity of exploitation. Although no public exploits are known at this time, the vulnerability poses a serious risk to systems running ABRT, especially in environments where local user accounts are shared or less controlled. The flaw is rooted in the insecure handling of shell commands and lack of input validation, a common and critical security oversight in software that interfaces with system shells.

Detailed information about CVE-2025-12744: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection'). Get real-time updates, te

CVE-2025-12744: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-12744: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Protection Mechanism Failure vulnerability in ESTsoft ALZip on Windows allows SmartScreen bypass.This issue affects ALZip: from 12.01 before 12.29.

CVE-2025-29864 is a vulnerability classified under CWE-693 (Protection Mechanism Failure) affecting ESTsoft's ALZip software on Windows platforms, specifically versions from 12.01 up to but not including 12.29. ALZip is a popular file compression and archive management tool. The vulnerability allows an attacker to bypass the Windows SmartScreen filter, a security feature designed to warn users before running unrecognized or potentially malicious files. This bypass means that malicious archives or executables compressed with ALZip could evade SmartScreen's protective prompts, increasing the risk of user execution of harmful content. The attack vector is local (AV:L), requiring the attacker to have access to the victim's machine or to deliver a malicious archive through social engineering or phishing. No privileges are required (PR:N), but user interaction (UI:A) is necessary to trigger the vulnerability. The vulnerability does not affect confidentiality, integrity, or availability directly but undermines a critical security control, potentially facilitating malware execution or further compromise. The CVSS 4.0 vector indicates high scope and impact on security integrity (SI:H) and availability (SA:H), reflecting the bypass of a security mechanism. No public exploits are known, and no patches are currently linked, suggesting that users should monitor for updates. The vulnerability was reserved in March 2025 and published in December 2025, indicating recent discovery and disclosure.

Detailed information about CVE-2025-29864: CWE-693 Protection Mechanism Failure in ESTsoft ALZip affecting ESTsoft ALZip. Get real-time updates, technical detai

CVE-2025-29864: CWE-693 Protection Mechanism Failure in ESTsoft ALZip - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-29864: CWE-693 Protection Mechanism Failure in ESTsoft ALZip

MEGACO dissector infinite loop in Wireshark 4.6.0 to 4.6.1 and 4.4.0 to 4.4.11 allows denial of service

CVE-2025-13946 is a vulnerability identified in the Wireshark network protocol analyzer, specifically affecting versions 4.4.0 through 4.4.11 and 4.6.0 through 4.6.1. The flaw is classified under CWE-835, which pertains to loops with unreachable exit conditions, commonly known as infinite loops. In this case, the MEGACO protocol dissector within Wireshark contains a logic error that causes it to enter an infinite loop when processing certain malformed or maliciously crafted MEGACO protocol data. MEGACO (Media Gateway Control Protocol) is used in telecommunications for controlling media gateways. When Wireshark attempts to dissect such crafted packets, the infinite loop causes the application to become unresponsive, resulting in a denial of service (DoS) condition. The CVSS v3.1 base score is 5.5 (medium severity), reflecting that the attack vector is local (AV:L), requires low attack complexity (AC:L), no privileges (PR:N), but does require user interaction (UI:R) to open the malicious capture or traffic. The vulnerability impacts availability only (A:H), with no confidentiality or integrity effects. There are no known exploits in the wild, and no patches have been published at the time of this report. The vulnerability could be exploited by an attacker who can provide crafted MEGACO traffic to a user running a vulnerable Wireshark version, causing the application to hang and potentially disrupting network analysis or monitoring activities.

Detailed information about CVE-2025-13946: CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark Foundation Wireshark affecting Wireshark

CVE-2025-13946: CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark Foundation Wireshark - Live Threat Intelligence - Threat Radar | OffSeq.com

Geographic Threat Map

Global Threat Distribution

Threat Levels

Recent Threats

Chrome 143 Patches High-Severity Vulnerabilities

CVE-2025-13472: CWE-862 Missing Authorization in Perforce Bl...

CVE-2025-12744: Improper Neutralization of Special Elements ...

CVE-2025-29864: CWE-693 Protection Mechanism Failure in ESTs...

CVE-2025-13946: CWE-835: Loop with Unreachable Exit Conditio...

Country Risk Levels

Keyboard Shortcuts

Navigation

Search & Filters

UI Controls

Accessibility