Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit NetSec

Reddit Cybersecurity

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

AWS Security Bulletins

GCP Kubernetes Security

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

main

A cross-site request forgery (CSRF) vulnerability in Jenkins 2.540 and earlier, LTS 2.528.2 and earlier allows attackers to trick users into logging in to the attacker's account.

CVE-2025-67639 is a CSRF vulnerability in Jenkins, a widely used automation server for continuous integration and continuous delivery. The vulnerability exists in Jenkins versions 2.540 and earlier, including LTS 2.528.2 and earlier, allowing attackers to craft malicious web requests that cause users to unknowingly log into the attacker’s account. This attack vector leverages the trust a user’s browser has in the Jenkins server, bypassing authentication controls by exploiting the lack of proper CSRF protections. When a user interacts with a malicious link or webpage, the attacker can hijack the session or force actions under the attacker’s identity, potentially leading to unauthorized access to build jobs, credentials, or pipeline configurations. Although no public exploits have been reported, the vulnerability’s presence in widely deployed Jenkins versions makes it a critical concern. The absence of a CVSS score indicates the need for manual severity assessment. The vulnerability affects the integrity of Jenkins environments and can lead to privilege escalation or unauthorized modifications. Jenkins is heavily used in European enterprises for software development and deployment, making this vulnerability a significant risk for operational security. The vulnerability requires user interaction but no authentication, increasing its attack surface. The lack of immediate patches necessitates proactive mitigation steps to reduce exposure.

Detailed information about CVE-2025-67639: Vulnerability in Jenkins Project Jenkins affecting Jenkins Project Jenkins. Get real-time updates, technical details,

CVE-2025-67639: Vulnerability in Jenkins Project Jenkins - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-67639: Vulnerability in Jenkins Project Jenkins

Jenkins 2.540 and earlier, LTS 2.528.2 and earlier does not mask build authorization tokens displayed on the job configuration form, increasing the potential for attackers to observe and capture them.

CVE-2025-67638 is a security vulnerability identified in Jenkins, a popular open-source automation server widely used for continuous integration and continuous delivery (CI/CD). The vulnerability affects Jenkins versions 2.540 and earlier, including the Long-Term Support (LTS) version 2.528.2 and earlier. The core issue is that build authorization tokens, which are sensitive credentials used to authenticate and authorize build jobs, are not properly masked or hidden on the job configuration form within the Jenkins user interface. This means that any user with access to the job configuration page can view these tokens in plaintext. Since these tokens grant significant privileges to trigger or control build jobs, their exposure increases the risk of unauthorized access and potential misuse. An attacker who obtains these tokens could impersonate legitimate build processes, manipulate build pipelines, or gain further access to the underlying infrastructure. Although there are no known exploits in the wild at the time of publication, the vulnerability represents a serious risk because it compromises the confidentiality of critical authentication tokens. The lack of a CVSS score suggests the vulnerability was recently disclosed and not yet fully assessed, but the technical details indicate a significant security concern. The vulnerability does not require complex exploitation techniques beyond having access to the Jenkins UI, which may be restricted in many environments but can be exposed in misconfigured or poorly secured installations. The flaw highlights the importance of proper credential handling and UI security in CI/CD tools. The Jenkins project is expected to release patches to mask these tokens appropriately, and users are advised to upgrade promptly once available.

Detailed information about CVE-2025-67638: Vulnerability in Jenkins Project Jenkins affecting Jenkins Project Jenkins. Get real-time updates, technical details,

CVE-2025-67638: Vulnerability in Jenkins Project Jenkins - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-67638: Vulnerability in Jenkins Project Jenkins

Jenkins 2.540 and earlier, LTS 2.528.2 and earlier does not properly close HTTP-based CLI connections when the connection stream becomes corrupted, allowing unauthenticated attackers to cause a denial of service.

CVE-2025-67635 is a vulnerability identified in Jenkins, a widely used open-source automation server that facilitates continuous integration and continuous delivery (CI/CD). The flaw exists in Jenkins versions 2.540 and earlier, including the Long-Term Support (LTS) release 2.528.2 and earlier. The issue arises because Jenkins does not properly close HTTP-based Command Line Interface (CLI) connections when the connection stream becomes corrupted. This improper handling leads to resource exhaustion or hanging connections, which an unauthenticated attacker can exploit remotely to cause a denial of service (DoS) condition. The vulnerability is classified under CWE-404 (Improper Resource Shutdown or Release), indicating that the system fails to release resources correctly, leading to potential service disruption. The CVSS v3.1 base score is 7.5 (high severity), reflecting the network attack vector, no required privileges, no user interaction, and a high impact on availability, while confidentiality and integrity remain unaffected. No known exploits have been reported in the wild, and no official patches have been linked at the time of publication. The vulnerability affects Jenkins instances exposed to untrusted networks, especially those that allow HTTP-based CLI access without adequate network segmentation or access controls. Attackers can repeatedly send malformed or corrupted CLI connection streams, causing Jenkins to maintain open connections and eventually exhaust system resources, leading to service unavailability. This can disrupt automated build and deployment pipelines, impacting development velocity and operational continuity.

Detailed information about CVE-2025-67635: Vulnerability in Jenkins Project Jenkins affecting Jenkins Project Jenkins. Get real-time updates, technical details,


CVE-2025-67639: Vulnerability in Jenkins Project JenkinsCVE-2025-67639 0 A cross-site request forgery (CSRF) vulnerability in Jenkins 2.540 and earlier, LTS 2.528.2 and earlier allows attackers to trick users into logging in to the attacker's account. LowVulnerabilityGermanyUnited KingdomFrance+5#cve #cve-2025-67639 Join the discussion	CVE Database V5	12/10/2025, 16:50:38 UTC Added: 12/10/2025, 16:57:19 UTC
CVE-2025-67638: Vulnerability in Jenkins Project JenkinsCVE-2025-67638 0 Jenkins 2.540 and earlier, LTS 2.528.2 and earlier does not mask build authorization tokens displayed on the job configuration form, increasing the potential for attackers to observe and capture them. MediumVulnerabilityGermanyFranceUnited Kingdom+5#cve #cve-2025-67638 Join the discussion	CVE Database V5	12/10/2025, 16:50:37 UTC Added: 12/10/2025, 16:57:19 UTC
CVE-2025-67635: Vulnerability in Jenkins Project JenkinsCVE-2025-67635 0 Jenkins 2.540 and earlier, LTS 2.528.2 and earlier does not properly close HTTP-based CLI connections when the connection stream becomes corrupted, allowing unauthenticated attackers to cause a denial of service. HighVulnerabilityGermanyUnited KingdomFrance+5#cve #cve-2025-67635 Join the discussion	CVE Database V5	12/10/2025, 16:50:35 UTC Added: 12/10/2025, 16:57:19 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional