Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

jena-core

File access paths in configuration files uploaded by users with administrator access are not validated.

This issue affects Apache Jena version up to 5.4.0.

Users are recommended to upgrade to version 5.5.0, which does not allow arbitrary configuration upload.

CVE-2025-50151 is a vulnerability classified under CWE-20 (Improper Input Validation) affecting Apache Jena versions up to 5.4.0. Apache Jena is an open-source Java framework for building semantic web and linked data applications. The vulnerability arises because the software does not validate file access paths in configuration files uploaded by users with administrator privileges. This lack of validation allows an attacker with admin rights to upload malicious configuration files that can manipulate the system's behavior, potentially leading to arbitrary code execution, unauthorized data access, or denial of service. The vulnerability has a CVSS v3.1 base score of 8.8, reflecting high impact on confidentiality, integrity, and availability, with network attack vector, low attack complexity, and no user interaction required. Although exploitation requires administrative privileges, the consequences of a successful attack are severe. Apache Jena 5.5.0 fixes this issue by preventing arbitrary configuration uploads, enforcing stricter validation and sanitization of configuration inputs. No known exploits are currently reported in the wild, but the high severity and ease of exploitation by privileged users make this a critical patch for affected organizations.

Detailed information about CVE-2025-50151: CWE-20 in Apache Software Foundation Apache Jena affecting Apache Software Foundation Apache Jena. Get real-time upda

CVE-2025-50151: CWE-20 in Apache Software Foundation Apache Jena - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-50151: CWE-20 in Apache Software Foundation Apache Jena

Threats Tagged 'cve-2025-50151'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-50151'

Lead Pen Test Professional