Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

This Red Hat Offline Knowledge Portal release upgrades from Solr 9.8.1 to Solr 10.0.0, and fixes several CVEs. It also includes content updates as of May 26 2026.

CVE-2025-11143 is a vulnerability in the org.eclipse.jetty URI parser where differential parsing of URIs compared to other parsers can lead to security bypasses, such as bypassing blacklist enforcement or revealing internal system details indirectly. This issue affects the Red Hat Offline Knowledge Portal, which has been updated from Solr 9.8.1 to 10.0.0 to mitigate this and other CVEs. The vulnerability requires an attacker to craft URIs that exploit Jetty's parsing differences while bypassing other components, making exploitation non-trivial. Red Hat rates this vulnerability as low severity and provides an updated container image as a fix.

Detailed information about Red Hat Security Advisory: Red Hat Offline Knowledge Portal security and content update affecting Red Hat Product Security Red Hat. G

Red Hat Security Advisory: Red Hat Offline Knowledge Portal security and content update - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2026:21773

https://access.redhat.com/products/red-hat-offline-knowledge-portal

https://access.redhat.com/security/cve/CVE-2025-11143

https://access.redhat.com/security/cve/CVE-2026-2332

https://access.redhat.com/security/cve/CVE-2026-34477

https://access.redhat.com/security/cve/CVE-2026-34478

https://access.redhat.com/security/cve/CVE-2026-34479

https://access.redhat.com/security/cve/CVE-2026-34480

https://access.redhat.com/security/cve/CVE-2026-34481

https://access.redhat.com/security/updates/classification/

https://docs.redhat.com/en/documentation/red_hat_offline_knowledge_portal/1

Canonical URL

Red Hat Security Advisory: Red Hat Offline Knowledge Portal security and content update

jetty-server

Eclipse Jetty

The Jetty URI parser has some key differences to other common parsers when evaluating invalid or unusual URIs. Differential parsing of URIs in systems using multiple components may result in security by-pass. For example a component that enforces a black list may interpret the URIs differently from one that generates a response. At the very least, differential parsing may divulge implementation details.

CVE-2025-11143 concerns an improper input validation vulnerability (CWE-20) in the URI parser component of the Eclipse Jetty server, a widely used Java-based HTTP server and servlet container. Jetty's URI parser differs from other common parsers in how it processes invalid or unusual URIs, leading to differential parsing outcomes. This discrepancy can cause security bypasses in systems where multiple components handle URIs differently—for example, a security component enforcing a blacklist might interpret a URI as malicious, while the response-generating component parses it as benign, or vice versa. Such inconsistencies can allow attackers to circumvent URI-based security controls, potentially exposing implementation details or bypassing access restrictions. The vulnerability affects Jetty versions 9.4.0, 10.0.0, 11.0.0, 12.0.0, and 12.1.0. The CVSS v3.1 score is 3.7 (low), reflecting that exploitation requires network access but has high attack complexity, no privileges or user interaction needed, and impacts integrity with no confidentiality or availability impact. No patches or known exploits are currently documented, but the issue is publicly disclosed and should be addressed by developers and administrators. The vulnerability is particularly relevant in environments where Jetty is integrated with other components that parse URIs differently, such as reverse proxies, firewalls, or application logic layers.

Detailed information about CVE-2025-11143: CWE-20 Improper Input Validation in Eclipse Foundation Eclipse Jetty affecting Eclipse Foundation Eclipse Jetty. Get 

CVE-2025-11143: CWE-20 Improper Input Validation in Eclipse Foundation Eclipse Jetty - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-11143: CWE-20 Improper Input Validation in Eclipse Foundation Eclipse Jetty


Red Hat Security Advisory: Red Hat Offline Knowledge Portal security and content updateCVE-2025-11143 0 This Red Hat Offline Knowledge Portal release upgrades from Solr 9.8.1 to Solr 10.0.0, and fixes several CVEs. It also includes content updates as of May 26 2026. HighVulnerability#gcve #csaf #cve-2025-11143 Join the discussion	GCVE Database	05/28/2026, 22:46:23 UTC Added: 05/29/2026, 21:01:50 UTC
CVE-2025-11143: CWE-20 Improper Input Validation in Eclipse Foundation Eclipse JettyCVE-2025-11143 0 The Jetty URI parser has some key differences to other common parsers when evaluating invalid or unusual URIs. Differential parsing of URIs in systems using multiple components may result in security by-pass. For example a component that enforces a black list may interpret the URIs differently from one that generates a response. At the very least, differential parsing may divulge implementation details. LowVulnerabilityUnited StatesGermanyUnited Kingdom+7#cve #cve-2025-11143 #cwe-20 Join the discussion	CVE Database V5	03/05/2026, 09:26:59 UTC Added: 03/05/2026, 09:53:42 UTC

Threats Tagged 'cve-2025-11143'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-11143'

Lead Pen Test Professional