Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

SoftEtherVPN 5.02.5187 is vulnerable to Use after Free in the Command.c file via the CheckNetworkAcceptThread function. NOTE: the Supplier disputes this because the use-after-free is not in the VPN software, but is instead in a separate tool that has no untrusted input and runs under the user's own privileges (it is a stress-testing tool for a networking stack).

CVE-2025-25568 is a critical use-after-free vulnerability identified in SoftEtherVPN version 5.02.5187, specifically within the Command.c file's CheckNetworkAcceptThread function. Use-after-free (CWE-416) vulnerabilities occur when a program continues to use a pointer after the memory it points to has been freed, potentially leading to arbitrary code execution, crashes, or data corruption. This vulnerability has a CVSS 3.1 base score of 9.8, indicating a critical severity level with network attack vector, low attack complexity, no privileges required, no user interaction, and impacts on confidentiality, integrity, and availability. However, the supplier disputes the vulnerability's applicability to the VPN software itself, clarifying that the use-after-free exists in a separate stress-testing tool for the networking stack. This tool reportedly does not process untrusted input and operates under the user's own privileges, which may limit the practical exploitability of the vulnerability in typical VPN deployments. No patches have been published yet, and no known exploits are in the wild. The vulnerability was reserved in early February 2025 and published in March 2025. The lack of affected version details beyond the stated 5.02.5187 version and the supplier's dispute suggest that the risk may be confined to specific use cases involving the stress-testing tool rather than the core VPN service. Nevertheless, given the critical CVSS score and the nature of use-after-free vulnerabilities, organizations using SoftEtherVPN or its associated tools should carefully assess their exposure and monitor for updates or patches.

Detailed information about CVE-2025-25568: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2025-25568: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-25568: n/a

Threats Tagged 'cve-2025-25568'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-25568'

Lead Pen Test Professional