Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit NetSec

Reddit Cybersecurity

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

AWS Security Bulletins

GCP Kubernetes Security

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

JSON Web Services in Liferay Portal 7.4.0 through 7.4.3.119, and Liferay DXP 2024.Q1.1 through 2024.Q1.9, 7.4 GA through update 92 published to OSGi are registered and invoked directly as classes which allows Service Access Policies get executed.

CVE-2025-43789 is a vulnerability classified under CWE-863 (Incorrect Authorization) affecting Liferay Portal versions 7.4.0 through 7.4.3.119 and Liferay DXP versions 2024.Q1.1 through 2024.Q1.9, as well as 7.4 GA through update 92 published to OSGi. The issue arises because JSON Web Services in these Liferay Portal versions are registered and invoked directly as classes, which leads to the execution of Service Access Policies. This design flaw can result in improper authorization checks, potentially allowing users with limited privileges to access or invoke services they should not be authorized to use. However, the vulnerability has a low CVSS 4.0 base score of 1.0, indicating limited impact and exploitability. The vector metrics show that the attack requires adjacent network access (AV:A), high attack complexity (AC:H), no privileges required (PR:L), and user interaction is needed (UI:A). The vulnerability impacts confidentiality and integrity at a low level and does not affect availability. No known exploits are currently in the wild, and no patches have been linked yet. The root cause is the direct invocation of JSON Web Services classes without sufficient authorization enforcement, which could allow unauthorized service access if an attacker can meet the conditions for exploitation. Given the complexity and prerequisites, exploitation is unlikely to be widespread or trivial.

Detailed information about CVE-2025-43789: CWE-863 Incorrect Authorization in Liferay Portal affecting Liferay Portal. Get real-time updates, technical details,

CVE-2025-43789: CWE-863 Incorrect Authorization in Liferay Portal - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-43789: CWE-863 Incorrect Authorization in Liferay Portal

Threats Tagged 'cve-2025-43789'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-43789'

Lead Pen Test Professional