Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

GCP Compute Engine Security

JVN Japan

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Microsoft Security Blog

Google Project Zero

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Check Point Research

Kaspersky Security Blog

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Connect2id Nimbus JOSE + JWT 10.0.x before 10.0.2 and 9.37.x before 9.37.4 allows a remote attacker to cause a denial of service via a deeply nested JSON object supplied in a JWT claim set, because of uncontrolled recursion. NOTE: this is independent of the Gson 2.11.0 issue because the Connect2id product could have checked the JSON object nesting depth, regardless of what limits (if any) were imposed by Gson.

CVE-2025-53864 is a medium severity vulnerability identified in the Connect2id Nimbus JOSE+JWT library versions 10.0.x prior to 10.0.2 and 9.37.x prior to 9.37.4. The issue arises from uncontrolled recursion when processing deeply nested JSON objects within JWT claim sets. Specifically, an attacker can craft a JSON Web Token containing a claim with a deeply nested JSON structure that triggers excessive recursive calls during parsing. This uncontrolled recursion can lead to a denial of service (DoS) condition by exhausting stack memory or CPU resources, causing the application or service using the vulnerable library to crash or become unresponsive. The vulnerability is independent of any limits imposed by the underlying Gson JSON parser (version 2.11.0), as the Connect2id product itself lacks checks on the nesting depth of JSON objects. This means that even if Gson imposes some limits, the Connect2id library does not enforce its own safeguards, allowing an attacker to exploit this flaw remotely without authentication or user interaction. The CVSS v3.1 base score is 5.8, reflecting a network attack vector with low complexity, no privileges or user interaction required, and a scope change due to potential impact on availability only (no confidentiality or integrity impact). No known exploits are currently reported in the wild, and no official patches or mitigation links were provided at the time of publication. This vulnerability falls under CWE-674 (Uncontrolled Recursion), highlighting a common programming flaw where recursive calls are not properly bounded, leading to resource exhaustion.

Detailed information about CVE-2025-53864: CWE-674 Uncontrolled Recursion in Connect2id Nimbus JOSE+JWT affecting Connect2id Nimbus JOSE+JWT. Get real-time upda

CVE-2025-53864: CWE-674 Uncontrolled Recursion in Connect2id Nimbus JOSE+JWT - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-53864: CWE-674 Uncontrolled Recursion in Connect2id Nimbus JOSE+JWT

Threats Tagged 'cve-2025-53864'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-53864'

Lead Pen Test Professional