Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

CIRCL OSINT Feed

ThreatFox MISP Feed

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

everest-core

CVE-2025-68137 is a high-severity buffer overflow vulnerability in the EVerest everest-core EV charging software stack versions prior to 2025.10.0. It arises from an integer overflow in the SdpPacket::parse_header() function, causing incorrect buffer length calculations that lead to either an infinite loop or a stack buffer overflow depending on the server configuration (TCP or TLS). This vulnerability can result in full compromise of confidentiality, integrity, and availability without requiring authentication or user interaction. The flaw is fixed in version 2025.10.0. European organizations operating EV charging infrastructure using affected versions are at risk of service disruption and potential remote code execution. Mitigation requires immediate upgrade to the patched version and careful network segmentation of EV charging systems.

CVE-2025-68137 is a classic buffer overflow vulnerability classified under CWE-120 and related to CWE-835 (loop with unreachable exit condition) found in the EVerest everest-core software stack used for managing electric vehicle (EV) charging stations. The vulnerability stems from an integer overflow in the SdpPacket::parse_header() function. Specifically, after reading a complete header of size 8 bytes, the current buffer length is incorrectly set to 7. When calculating the remaining length to read, the code subtracts the header length from the current length, resulting in a negative value. Because the length is stored in an unsigned size_t type, this negative value is interpreted as a very large positive number (SIZE_MAX or slightly less). This causes the software to either enter an infinite loop (in plain TCP servers) or trigger a stack buffer overflow (in TLS servers). The buffer overflow can lead to memory corruption, potentially allowing remote attackers to execute arbitrary code, crash the service, or cause denial of service. The vulnerability does not require authentication or user interaction, increasing its risk. The issue was resolved in version 2025.10.0 of everest-core. No known exploits are reported in the wild yet, but the high CVSS score of 8.4 reflects the critical impact and complexity of exploitation due to the high attack complexity and network attack vector. The vulnerability affects all versions prior to 2025.10.0.

Detailed information about CVE-2025-68137: CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') in EVerest everest-core affecting EVe

CVE-2025-68137: CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') in EVerest everest-core - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-68137: CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') in EVerest everest-core

Threats Tagged 'cve-2025-68137'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-68137'

Lead Pen Test Professional