Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

CVE Database V5

GCVE Database

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Malware

Reddit Reverse Engineering

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

DCMTK

A vulnerability was found in DCMTK 3.6.9. It has been declared as critical. This vulnerability affects unknown code of the component dcmjpls JPEG-LS Decoder. The manipulation leads to memory corruption. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The name of the patch is 3239a7915. It is recommended to apply a patch to fix this issue.

CVE-2025-2357 is a memory corruption vulnerability identified in the DCMTK (DICOM Toolkit) version 3.6.9, specifically within the dcmjpls JPEG-LS Decoder component. DCMTK is an open-source library widely used for handling DICOM medical imaging files. The vulnerability arises from improper handling of JPEG-LS encoded data, which can be manipulated by an attacker to corrupt memory. This corruption can lead to undefined behavior including crashes or potentially arbitrary code execution. The attack vector is remote network access, requiring no privileges but some user interaction, such as processing a crafted DICOM file. The CVSS 4.0 score is 5.3 (medium), reflecting moderate impact on confidentiality, integrity, and availability with relatively low complexity of attack. Although no confirmed exploits are currently active in the wild, the public disclosure of exploit code increases the risk of exploitation attempts. The patch identified by commit 3239a7915 addresses the vulnerability by correcting the decoding logic to prevent memory corruption. Given DCMTK's role in medical imaging workflows, exploitation could disrupt healthcare services or expose sensitive patient data. The vulnerability does not require authentication, making exposed systems particularly vulnerable if accessible over networks. The lack of scope change indicates the vulnerability is confined to the affected component without broader system impact. Overall, this vulnerability represents a significant risk to medical environments relying on DCMTK for image processing.

Detailed information about CVE-2025-2357: Memory Corruption in DCMTK affecting null DCMTK. Get real-time updates, technical details, and mitigation strategies.

CVE-2025-2357: Memory Corruption in DCMTK - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-2357: Memory Corruption in DCMTK

Threats Tagged 'cve-2025-2357'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-2357'

Lead Pen Test Professional