Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

AlienVault OTX General

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

CIRCL OSINT Feed

ThreatFox MISP Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Microsoft Security Blog

Google Project Zero

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

python-utcp

The vulnerability arises when a client fetches a tools’ JSON specification, known as a Manual, from a remote Manual Endpoint. While a provider may initially serve a benign manual (e.g., one defining an HTTP tool call), earning the clients’ trust, a malicious provider can later change the manual to exploit the client.

CVE-2025-14542 is a vulnerability classified under CWE-501 (Trust Boundary Violation) that affects clients fetching JSON specifications, known as Manuals, from remote Manual Endpoints. The core issue arises because a client initially trusts a benign manual provided remotely, which defines tool behavior such as HTTP tool calls. However, the provider can later alter this manual to a malicious version, exploiting the client that continues to trust the updated manual without sufficient validation. This trust boundary violation allows an attacker controlling the manual endpoint to execute arbitrary actions on the client side, potentially compromising confidentiality, integrity, and availability of the client system. The vulnerability has a CVSS 3.1 score of 7.5, indicating high severity, with network attack vector (AV:N), high attack complexity (AC:H), no privileges required (PR:N), but requiring user interaction (UI:R). The scope is unchanged (S:U), but the impact on confidentiality, integrity, and availability is high (C:H/I:H/A:H). No patches or known exploits are currently reported, but the vulnerability poses a significant risk due to the dynamic nature of manual updates and the implicit trust clients place on these remote resources. The vulnerability affects any system or tool that relies on fetching and executing instructions from remote JSON manuals without robust validation or cryptographic verification.

Detailed information about CVE-2025-14542: CWE-501 Trust Boundary Violation. Get real-time updates, technical details, and mitigation strategies.

CVE-2025-14542: CWE-501 Trust Boundary Violation - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-14542: CWE-501 Trust Boundary Violation

Threats Tagged 'cve-2025-14542'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-14542'

Lead Pen Test Professional