Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

The /charms endpoint on a Juju controller lacked sufficient authorization checks, allowing any user with an account on the controller to upload a charm. Uploading a malicious charm that exploits a Zip Slip vulnerability could allow an attacker to gain access to a machine running a unit through the affected charm.

CVE-2025-53513 is a high-severity vulnerability affecting Canonical's Juju software versions 2.0.0 and 3.0.0. Juju is a popular open-source application modeling tool used to deploy, configure, and manage services in cloud environments. The vulnerability arises from insufficient authorization checks on the /charms endpoint of the Juju controller. Specifically, any authenticated user with an account on the controller can upload a charm without proper validation. This flaw enables attackers to upload malicious charms that exploit a Zip Slip vulnerability, a type of path traversal attack (CWE-24). Zip Slip allows crafted archive files to overwrite arbitrary files on the filesystem by using directory traversal sequences like '../' in filenames within the archive. By leveraging this, an attacker can place malicious files outside the intended directory, potentially gaining unauthorized access or control over machines running Juju units. The CVSS 3.1 score of 8.8 reflects the vulnerability's network attack vector (AV:N), low attack complexity (AC:L), requiring privileges (PR:L) but no user interaction (UI:N), with high impact on confidentiality, integrity, and availability (C:H/I:H/A:H). Although no known exploits are reported in the wild yet, the vulnerability poses a significant risk due to the ease of exploitation by any authenticated user and the critical impact on affected systems. The lack of patch links suggests that remediation may still be pending or in progress. Organizations using Juju for cloud orchestration must urgently assess exposure and apply mitigations to prevent potential compromise through malicious charm uploads.

Detailed information about CVE-2025-53513: CWE-24: Path Traversal: '../filedir' in Canonical Juju affecting Canonical Juju. Get real-time updates, technical det

CVE-2025-53513: CWE-24: Path Traversal: '../filedir' in Canonical Juju - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-53513: CWE-24: Path Traversal: '../filedir' in Canonical Juju

Threats Tagged 'cve-2025-53513'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-53513'

Lead Pen Test Professional