Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

camel-neo4j

org.apache.camel:camel-neo4j

Cypher Injection vulnerability in Apache Camel camel-neo4j component.

This issue affects Apache Camel: from 4.10.0 before 4.10.8, from 4.14.0 before 4.14.3, from 4.15.0 before 4.17.0

Users are recommended to upgrade to version 4.10.8 for 4.10.x LTS and 4.14.3 for 4.14.x LTS and 4.17.0.

CVE-2025-66169 is a Cypher Injection vulnerability identified in the Apache Camel camel-neo4j component, which facilitates integration between Apache Camel and Neo4j graph databases. The vulnerability exists in Apache Camel versions 4.10.0 up to but not including 4.10.8, 4.14.0 up to but not including 4.14.3, and 4.15.0 up to but not including 4.17.0. Cypher Injection is analogous to SQL Injection but targets the Cypher query language used by Neo4j. An attacker can craft malicious input that is improperly sanitized or validated before being embedded into Cypher queries, enabling unauthorized modification of database queries. This can lead to integrity violations such as unauthorized data manipulation or corruption. The CVSS 3.1 base score is 5.3, reflecting a medium severity with network attack vector, low attack complexity, no privileges required, and no user interaction needed. The vulnerability does not impact confidentiality or availability but compromises integrity. No public exploits have been reported yet, but the risk remains significant for systems relying on vulnerable versions. The Apache Software Foundation recommends upgrading to fixed versions 4.10.8, 4.14.3, or 4.17.0 to remediate the issue. The CWE-89 classification confirms this is an injection flaw. Organizations using Apache Camel with Neo4j should also review their input validation and query construction practices to prevent injection risks.

Detailed information about CVE-2025-66169: Cypher Injection in Apache Software Foundation Apache Camel Neo4j affecting Apache Software Foundation Apache Camel N

CVE-2025-66169: Cypher Injection in Apache Software Foundation Apache Camel Neo4j - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-66169: Cypher Injection in Apache Software Foundation Apache Camel Neo4j

Threats Tagged 'cve-2025-66169'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-66169'

Lead Pen Test Professional