Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Krebs on Security

Palo Alto Unit 42

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

elasticsearch

Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can allow a low-privileged authenticated user to cause Excessive Allocation (CAPEC-130) causing a persistent denial of service (OOM crash) via submission of oversized user settings data.

CVE-2025-68384 is a resource exhaustion vulnerability classified under CWE-770 (Allocation of Resources Without Limits or Throttling) affecting Elastic's Elasticsearch product versions 7.0.0 through 9.2.0. The flaw allows a low-privileged authenticated user to submit oversized user settings data that Elasticsearch does not adequately limit or throttle. This leads to excessive memory allocation (CAPEC-130), causing the Elasticsearch process to crash due to out-of-memory conditions, resulting in a persistent denial of service (DoS). The vulnerability impacts availability exclusively, as it does not allow unauthorized data access or modification. The attack vector is network-based with low attack complexity and no user interaction required. Although no known exploits are currently reported in the wild, the vulnerability poses a significant risk to environments where Elasticsearch is exposed to authenticated users, such as multi-tenant or shared systems. The lack of official patches at the time of publication necessitates immediate mitigation through configuration and monitoring controls. This vulnerability highlights the importance of resource management and input validation in distributed search and analytics platforms.

Detailed information about CVE-2025-68384: CWE-770 Allocation of Resources Without Limits or Throttling in Elastic Elasticsearch affecting Elastic Elasticsearch

CVE-2025-68384: CWE-770 Allocation of Resources Without Limits or Throttling in Elastic Elasticsearch - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-68384: CWE-770 Allocation of Resources Without Limits or Throttling in Elastic Elasticsearch

Threats Tagged 'cve-2025-68384'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-68384'

Lead Pen Test Professional