Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

An attacker with access to a minion key can exploit the 'on demand' pillar functionality with a specially crafted git url which could cause and arbitrary command to be run on the master with the same privileges as the master process.

CVE-2025-22237 is a command injection vulnerability in VMware SALT versions 3006.x and 3007.x, specifically within the 'on demand' pillar functionality. The vulnerability arises when an attacker possessing a valid minion key crafts a malicious git URL that is processed by the master server. Due to insufficient sanitization of this input, the attacker can execute arbitrary commands on the master with the same privileges as the master process. This vulnerability is classified under CWE-77 (Improper Neutralization of Special Elements used in a Command). The attack vector is local (AV:L), requiring the attacker to have high privileges (PR:H) via possession of a minion key, but no user interaction is needed (UI:N). The scope is unchanged (S:U), but the impact on confidentiality, integrity, and availability is high (C:H/I:H/A:H), reflected in a CVSS 3.1 base score of 6.7 (medium severity). No patches or exploits are currently publicly available, but the vulnerability poses a significant risk due to the elevated privileges of the master process. The vulnerability was reserved in early 2025 and published in June 2025. The master server, which orchestrates configuration management and automation, is critical infrastructure in many organizations, making this vulnerability particularly concerning if exploited.

Detailed information about CVE-2025-22237: Vulnerability in VMware SALT affecting VMware SALT. Get real-time updates, technical details, and mitigation strategi

CVE-2025-22237: Vulnerability in VMware SALT - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-22237: Vulnerability in VMware SALT

Threats Tagged 'cve-2025-22237'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-22237'

Lead Pen Test Professional