Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

AlienVault OTX General

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Server-Side Request Forgery (SSRF) vulnerability in Apache Kylin.

This issue affects Apache Kylin: from 4.0.0 through 5.0.2. You are fine as long as the Kylin's system and project admin access is well protected.

Users are recommended to upgrade to version 5.0.3, which fixes the issue.

CVE-2025-61735 is a Server-Side Request Forgery (SSRF) vulnerability classified under CWE-918 affecting Apache Kylin versions from 4.0.0 up to 5.0.2. SSRF vulnerabilities occur when an attacker can abuse a server’s functionality to make HTTP requests to arbitrary domains or internal systems, potentially bypassing network access controls. In this case, the vulnerability allows unauthenticated remote attackers to craft requests that the Apache Kylin server will execute, which can lead to unauthorized information disclosure, manipulation of internal services, or denial of service. The vulnerability is exploitable over the network without requiring privileges or user interaction, increasing its risk profile. The CVSS v3.1 score of 7.3 indicates a high severity due to the combination of network attack vector, low complexity, no privileges required, and impacts on confidentiality, integrity, and availability. Apache Kylin is an open-source distributed analytics engine designed for big data, commonly used in enterprise environments for OLAP on Hadoop and cloud data platforms. The vulnerability stems from insufficient validation of URLs or endpoints that Kylin accesses internally, allowing attackers to redirect requests to internal or external systems. The recommended mitigation is upgrading to Apache Kylin version 5.0.3, which addresses the SSRF flaw. Until patched, securing admin access and restricting network access to Kylin instances can reduce exploitation risk. No public exploits or active attacks have been reported yet, but the vulnerability’s characteristics make it a significant risk for organizations relying on Apache Kylin for critical analytics workloads.

Detailed information about CVE-2025-61735: CWE-918 Server-Side Request Forgery (SSRF) in Apache Software Foundation Apache Kylin affecting Apache Software Found

CVE-2025-61735: CWE-918 Server-Side Request Forgery (SSRF) in Apache Software Foundation Apache Kylin - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-61735: CWE-918 Server-Side Request Forgery (SSRF) in Apache Software Foundation Apache Kylin

Threats Tagged 'cve-2025-61735'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-61735'

Lead Pen Test Professional