Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit NetSec

Reddit Cybersecurity

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

credentials-binding-plugin

Jenkins Credentials Binding Plugin 720.v3f6decef43ea_ and earlier does not properly sanitize file names for file and zip file credentials, allowing attackers able to provide credentials to a job to write files to arbitrary locations on the node filesystem, which can lead to remote code execution if Jenkins is configured to allow a low-privileged user to configure file or zip file credentials used for a job running on the built-in node.

The Jenkins Credentials Binding Plugin before version 720.v3f6decef43ea_ improperly sanitizes file names associated with file and zip file credentials. This flaw enables attackers with the ability to supply credentials to a Jenkins job to write files arbitrarily on the node's filesystem. If Jenkins permits low-privileged users to configure these credentials for jobs on the built-in node, this vulnerability can be exploited to achieve remote code execution. The vulnerability was published on 2026-05-27, but no CVSS score or remediation level has been provided yet.

Detailed information about CVE-2026-48922: Vulnerability in Jenkins Project Jenkins Credentials Binding Plugin affecting Jenkins Project Jenkins Credentials Bin

CVE-2026-48922: Vulnerability in Jenkins Project Jenkins Credentials Binding Plugin - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-48922: Vulnerability in Jenkins Project Jenkins Credentials Binding Plugin

Jenkins Credentials Binding Plugin 687.v619cb_15e923f and earlier does not properly mask (i.e., replace with asterisks) credentials present in exception error messages that are written to the build log.

CVE-2025-53650 is a vulnerability identified in the Jenkins Credentials Binding Plugin, specifically in versions 687.v619cb_15e923f and earlier. The plugin is designed to securely inject credentials into Jenkins build environments, masking sensitive information to prevent exposure. However, due to improper masking, credentials that appear in exception error messages are logged in plaintext within the build logs. This flaw allows sensitive secrets such as passwords, API tokens, or SSH keys to be exposed to anyone with access to these logs. The vulnerability has a CVSS 3.1 base score of 7.3, indicating high severity, with an attack vector of network (AV:N), low attack complexity (AC:L), no privileges required (PR:N), no user interaction (UI:N), and impacts on confidentiality, integrity, and availability (C:L/I:L/A:L). The scope remains unchanged (S:U), meaning the impact is confined to the vulnerable component. Exploitation does not require authentication or user interaction, making it easier for attackers to leverage this flaw remotely. Although no known exploits have been reported in the wild, the risk of credential leakage can lead to unauthorized access to Jenkins environments, enabling further attacks such as pipeline manipulation, code injection, or lateral movement within networks. The vulnerability affects Jenkins installations using the Credentials Binding Plugin, a common tool in continuous integration and continuous deployment (CI/CD) workflows. The lack of proper masking in error logs undermines the security model of credential handling in Jenkins, posing a significant threat to organizations relying on automated build and deployment processes.

Detailed information about CVE-2025-53650: Vulnerability in Jenkins Project Jenkins Credentials Binding Plugin affecting Jenkins Project Jenkins Credentials Bin

CVE-2025-53650: Vulnerability in Jenkins Project Jenkins Credentials Binding Plugin - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-53650: Vulnerability in Jenkins Project Jenkins Credentials Binding Plugin


CVE-2026-48922: Vulnerability in Jenkins Project Jenkins Credentials Binding PluginCVE-2026-48922 0 Jenkins Credentials Binding Plugin 720.v3f6decef43ea_ and earlier does not properly sanitize file names for file and zip file credentials, allowing attackers able to provide credentials to a job to write files to arbitrary locations on the node filesystem, which can lead to remote code execution if Jenkins is configured to allow a low-privileged user to configure file or zip file credentials used for a job running on the built-in node. HighVulnerability#cve #cve-2026-48922 Join the discussion	CVE Database V5	05/27/2026, 14:13:49 UTC Added: 05/27/2026, 15:18:51 UTC
CVE-2025-53650: Vulnerability in Jenkins Project Jenkins Credentials Binding PluginCVE-2025-53650 0 Jenkins Credentials Binding Plugin 687.v619cb_15e923f and earlier does not properly mask (i.e., replace with asterisks) credentials present in exception error messages that are written to the build log. HighVulnerabilityGermanyFranceUnited Kingdom+4#cve #cve-2025-53650 Join the discussion	CVE Database V5	07/09/2025, 15:39:26 UTC Added: 07/09/2025, 15:54:34 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional