Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

commons-compress

Red Hat Data Grid 8.4.7 addresses two moderate severity security vulnerabilities in the commons-compress library that could cause denial of service conditions. These issues involve an infinite loop triggered by a corrupted DUMP file and an OutOfMemoryError when unpacking a broken Pack200 file. The update replaces version 8.4.6 and includes these security fixes along with other bug fixes and enhancements.

Red Hat Data Grid 8.4.7 fixes two security issues identified as CVE-2024-25710 and CVE-2024-26308 in the commons-compress library. CVE-2024-25710 is a denial of service vulnerability caused by an infinite loop when processing a corrupted DUMP file. CVE-2024-26308 causes an OutOfMemoryError when unpacking a malformed Pack200 file. Both vulnerabilities affect Red Hat Data Grid 8 and were triaged by Red Hat Product Security. The update mitigates these issues by correcting the handling of these corrupted archive files to prevent resource exhaustion.

Detailed information about Red Hat Security Advisory: Red Hat Data Grid 8.4.7 security update affecting Red Hat Product Security Red Hat. Get real-time updates,

Red Hat Security Advisory: Red Hat Data Grid 8.4.7 security update - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2024:1509

https://access.redhat.com/security/updates/classification/#moderate

https://access.redhat.com/jbossnetwork/restricted/softwareDetail.html?softwareId=70381&product=data.grid&version=8.4&downloadType=patches

https://access.redhat.com/documentation/en-us/red_hat_data_grid/8.4/html-single/red_hat_data_grid_8.4_release_notes/index

2264988

2264989

Canonical URL

Red Hat Security Advisory: Red Hat Data Grid 8.4.7 security update

Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Apache Commons Compress.This issue affects Apache Commons Compress: from 1.3 through 1.25.0.

Users are recommended to upgrade to version 1.26.0 which fixes the issue.

CVE-2024-25710 is a vulnerability identified in the Apache Commons Compress library, versions 1.3 through 1.25.0. The root cause is a loop with an unreachable exit condition, classified under CWE-835 (Loop with Unreachable Exit Condition), which results in an infinite loop scenario. This infinite loop can cause the affected application to become unresponsive or crash, effectively leading to a denial-of-service (DoS) condition. The vulnerability has a CVSS v3.1 base score of 8.1, indicating high severity. The vector indicates that exploitation requires local access (AV:L), high attack complexity (AC:H), no privileges (PR:N), and no user interaction (UI:N), but the scope is changed (S:C), meaning the vulnerability can affect components beyond the initially vulnerable one. The impact on confidentiality, integrity, and availability is rated high, suggesting that the infinite loop could be leveraged to disrupt service availability and potentially cause cascading failures in dependent systems. Apache Commons Compress is a widely used Java library for handling compression and decompression of archive files in various formats. It is embedded in many enterprise applications, middleware, and cloud services. The vulnerability was publicly disclosed on February 19, 2024, with no known exploits in the wild at the time of publication. The recommended remediation is to upgrade to version 1.26.0, which addresses the infinite loop condition. Given the library’s widespread use, the vulnerability poses a significant risk to any software stack that incorporates it without the patch.

Detailed information about CVE-2024-25710: CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop') in Apache Software Foundation Apache Commons Compress 

CVE-2024-25710: CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop') in Apache Software Foundation Apache Commons Compress - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-25710: CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop') in Apache Software Foundation Apache Commons Compress


Red Hat Security Advisory: Red Hat Data Grid 8.4.7 security updateCVE-2024-25710 0 Red Hat Data Grid 8.4.7 addresses two moderate severity security vulnerabilities in the commons-compress library that could cause denial of service conditions. These issues involve an infinite loop triggered by a corrupted DUMP file and an OutOfMemoryError when unpacking a broken Pack200 file. The update replaces version 8.4.6 and includes these security fixes along with other bug fixes and enhancements. MediumVulnerability#gcve #csaf #cve-2024-25710 Join the discussion	GCVE Database	03/26/2024, 11:15:45 UTC Added: 06/02/2026, 21:44:03 UTC
CVE-2024-25710: CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop') in Apache Software Foundation Apache Commons CompressCVE-2024-25710 0 Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Apache Commons Compress.This issue affects Apache Commons Compress: from 1.3 through 1.25.0. Users are recommended to upgrade to version 1.26.0 which fixes the issue. HighVulnerabilityGermanyFranceUnited Kingdom+4#cve #cve-2024-25710 #cwe-835 Join the discussion	CVE Database V5	02/19/2024, 08:33:40 UTC Added: 11/04/2025, 16:46:31 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional