Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

AWS Security Bulletins

GCP Kubernetes Security

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit BlueTeam

Reddit ThreatIntel

Reddit Malware

Reddit Reverse Engineering

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

jimureport

JimuReport thru version 2.1.3 is vulnerable to remote code execution when processing user-controlled H2 JDBC URLs. The application passes the attacker-supplied JDBC URL directly to the H2 driver, allowing the use of certain directives to execute arbitrary Java code. A different vulnerability than CVE-2025-10770.

CVE-2025-66913 is a critical remote code execution (RCE) vulnerability affecting JimuReport versions through 2.1.3. The root cause lies in the application's unsafe processing of user-controlled H2 JDBC URLs. JimuReport directly passes these attacker-supplied JDBC URLs to the H2 database driver without adequate validation or sanitization. The H2 driver supports certain directives within the JDBC URL that can be abused to execute arbitrary Java code on the host system. This means an attacker can craft a malicious JDBC URL that, when processed by JimuReport, triggers execution of arbitrary commands or code in the Java runtime environment. This vulnerability is distinct from CVE-2025-10770, indicating a separate attack vector. Exploitation does not require authentication or user interaction, making it highly dangerous. The vulnerability impacts confidentiality by allowing data access or exfiltration, integrity by enabling code injection or modification, and availability by potentially causing system crashes or persistent backdoors. No official patches or workarounds are currently listed, and no public exploits have been observed yet. However, the nature of the vulnerability suggests that exploitation could be straightforward for attackers familiar with H2 JDBC URL manipulation. Organizations using JimuReport for business intelligence or reporting should consider this a high priority risk.

Detailed information about CVE-2025-66913: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2025-66913: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-66913: n/a

Threats Tagged 'cve-2025-66913'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-66913'

Lead Pen Test Professional