Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

AlienVault OTX General

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit NetSec

Reddit Cybersecurity

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

This vulnerability (CVE-2024-12797) is due to improper certificate validation in OpenSSL's implementation of RFC7250 Raw Public Key (RPK) authentication. Specifically, when RPK is enabled on both TLS clients and servers, the TLS/DTLS handshake fails to abort if the server's RPK does not match the expected key, even though SSL_VERIFY_PEER verification mode is set. This flaw allows an attacker to perform man-in-the-middle attacks by spoofing the server's identity. The vulnerability was introduced in OpenSSL 3.2, first shipped in RHEL 9.5, and affects Red Hat OpenShift Builds versions 1.2 through 1.3. RPK is disabled by default, so only users who explicitly enable RPK are affected. Ruby packages in RHEL are not affected as they do not expose RPK functions. No official fix is currently available, and mitigation options do not meet Red Hat's criteria for ease of use or applicability. Users are advised to monitor Red Hat advisories for future updates.

Detailed information about Red Hat Security Advisory: Red Hat OpenShift Builds 1.3 affecting Red Hat Product Security Red Hat. Get real-time updates, technical 

Red Hat Security Advisory: Red Hat OpenShift Builds 1.3 - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2025:2754

https://docs.openshift.com/builds/1.1/about/overview-openshift-builds.html

https://access.redhat.com/security/cve/CVE-2024-12797

https://access.redhat.com/security/cve/CVE-2025-1244

Canonical URL

Red Hat Security Advisory: Red Hat OpenShift Builds 1.3

emacs

GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language (elisp), and the capability to read e-mail and news.

Security Fix(es):

* emacs: Shell Injection Vulnerability in GNU Emacs via Custom "man" URI Scheme (CVE-2025-1244)

* emacs: Shell Injection Vulnerability in GNU Emacs via Custom "man" URI Scheme [rhel-9.5.z] (CVE-2025-1244)

Bug Fix(es):

* Eliminate use of obsolete %patchN syntax [rhel-9.5.z] (JIRA:RHEL-80450)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section.

This vulnerability (CVE-2025-1244) in GNU Emacs involves improper neutralization of special elements used in OS commands, specifically via the custom "man" URI scheme. It enables remote attackers with no privileges and only user interaction to execute arbitrary shell commands on vulnerable systems. The issue affects Emacs versions prior to 9.4.1, including 9.4. Red Hat Enterprise Linux 9 and 9.4 Extended Update Support releases include patched Emacs packages to address this shell injection flaw. The vendor advisories provide detailed remediation instructions and updated packages for multiple architectures.

Detailed information about Red Hat Security Advisory: emacs security update affecting Red Hat Product Security Red Hat. Get real-time updates, technical details

Red Hat Security Advisory: emacs security update - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2025:2195

https://access.redhat.com/security/updates/classification/#important

2345150

Red Hat Security Advisory: emacs security and bug fix update


Red Hat Security Advisory: Red Hat OpenShift Builds 1.3CVE-2024-12797 0 Red Hat OpenShift Builds 1.3 HighVulnerability#gcve #csaf #cve-2024-12797 Join the discussion	GCVE Database	03/13/2025, 13:23:17 UTC Added: 06/02/2026, 21:43:37 UTC
Red Hat Security Advisory: emacs security and bug fix updateCVE-2025-1244 0 GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language (elisp), and the capability to read e-mail and news. Security Fix(es): * emacs: Shell Injection Vulnerability in GNU Emacs via Custom "man" URI Scheme (CVE-2025-1244) * emacs: Shell Injection Vulnerability in GNU Emacs via Custom "man" URI Scheme [rhel-9.5.z] (CVE-2025-1244) Bug Fix(es): * Eliminate use of obsolete %patchN syntax [rhel-9.5.z] (JIRA:RHEL-80450) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer the CVE page(s) listed in the References section. HighVulnerability#gcve #csaf #cve-2025-1244 Join the discussion	GCVE Database	02/27/2025, 10:08:57 UTC Added: 08/02/2026, 21:27:07 UTC

Threats Tagged 'cve-2025-1244'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-1244'

Lead Pen Test Professional