Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

GCP Compute Engine Security

JVN Japan

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Microsoft Security Blog

Google Project Zero

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Check Point Research

Kaspersky Security Blog

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

SAP NetWeaver AS Java allows an attacker authenticated as a non-administrative user to use a flaw in an available service to upload an arbitrary file. This file when executed can lead to a full compromise of confidentiality, integrity and availability of the system.

CVE-2025-42922 is a critical security vulnerability identified in SAP NetWeaver AS Java, specifically affecting the Deploy Web Service component in version J2EE-APPS 7.50. The root cause is improper control over the generation of code (classified under CWE-94), which allows an authenticated user with non-administrative privileges to upload arbitrary files to the system. These files, once uploaded, can be executed by the system, leading to remote code execution (RCE). This flaw effectively bypasses typical privilege boundaries, enabling attackers to gain full control over the affected system. The vulnerability does not require administrative credentials or user interaction, significantly lowering the barrier to exploitation. The CVSS v3.1 base score of 9.9 reflects the vulnerability's critical nature, with attack vector being network-based, low attack complexity, requiring only low privileges, and no user interaction. The scope is changed, indicating that exploitation affects components beyond the initially vulnerable one, impacting confidentiality, integrity, and availability at a high level. Although no exploits have been reported in the wild yet, the vulnerability's characteristics make it a prime target for attackers aiming to compromise enterprise environments running SAP NetWeaver AS Java. The lack of available patches at the time of disclosure increases the urgency for organizations to implement interim mitigations and monitor their environments closely.

Detailed information about CVE-2025-42922: CWE-94: Improper Control of Generation of Code in SAP_SE SAP NetWeaver AS Java (Deploy Web Service) affecting SAP_SE 

CVE-2025-42922: CWE-94: Improper Control of Generation of Code in SAP_SE SAP NetWeaver AS Java (Deploy Web Service) - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-42922: CWE-94: Improper Control of Generation of Code in SAP_SE SAP NetWeaver AS Java (Deploy Web Service)

Threats Tagged 'cve-2025-42922'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-42922'

Lead Pen Test Professional