Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Zero Day Initiative

Cisco Talos

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

IBM ApplinX 11.1 could disclose sensitive information about server architecture that could aid in further attacks against the system.

CVE-2025-36419 is a vulnerability classified under CWE-550, involving server-generated error messages in IBM ApplinX version 11.1 that inadvertently disclose sensitive information about the underlying server architecture. ApplinX is a development and modernization platform used to create web and mobile applications from legacy systems, often deployed in enterprise environments. The vulnerability arises because error messages returned by the server include details that reveal internal system information such as software versions, configuration details, or system paths. This information leakage can provide attackers with valuable intelligence to identify further vulnerabilities or tailor attacks more effectively. The CVSS 3.1 base score is 5.3 (medium), reflecting that the vulnerability can be exploited remotely without authentication or user interaction, but only impacts confidentiality without affecting integrity or availability. No patches were listed at the time of publication, and no known exploits have been observed in the wild. The vulnerability was reserved in April 2025 and published in January 2026. The disclosure underscores the importance of secure error handling practices to avoid exposing sensitive system details that could aid adversaries in reconnaissance and subsequent exploitation attempts.

Detailed information about CVE-2025-36419: CWE-550 Server-generated Error Message Containing Sensitive Information in IBM ApplinX affecting IBM ApplinX. Get rea

CVE-2025-36419: CWE-550 Server-generated Error Message Containing Sensitive Information in IBM ApplinX - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-36419: CWE-550 Server-generated Error Message Containing Sensitive Information in IBM ApplinX

squid

Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn the credentials a trusted client uses to authenticate. This potentially allows a remote client to identify security tokens or credentials used internally by a web application using Squid for backend load balancing. These attacks do not require Squid to be configured with HTTP authentication. The vulnerability is fixed in version 7.2. As a workaround, disable debug information in administrator mailto links generated by Squid by configuring squid.conf with email_err_data off.

CVE-2025-62168 is a critical information disclosure vulnerability affecting Squid, a widely used caching proxy server, in versions prior to 7.2. The root cause is the failure to properly redact HTTP authentication credentials in error messages generated during failure handling. This vulnerability allows a remote attacker to craft requests that cause Squid to generate error responses containing sensitive authentication credentials or security tokens used by trusted clients. Notably, exploitation does not require Squid to be configured with HTTP authentication, broadening the scope of affected deployments. The vulnerability enables attackers to bypass browser security protections, potentially exposing credentials that could be used for further attacks against backend web applications or services behind Squid. The vulnerability is classified under CWE-209 (Generation of Error Message Containing Sensitive Information) and CWE-550 (Exposure of Sensitive Information to an Unauthorized Actor). The CVSS v3.1 base score is 10.0, reflecting a network attack vector, no required privileges or user interaction, complete confidentiality and integrity impact, and a scope change. Although no known exploits are reported in the wild yet, the criticality and ease of exploitation make this a high-risk threat. The issue is resolved in Squid 7.2. As an interim mitigation, administrators can disable debug information in error emails by setting 'email_err_data off' in squid.conf to prevent leakage of sensitive data in administrator mailto links.

Detailed information about CVE-2025-62168: CWE-209: Generation of Error Message Containing Sensitive Information in squid-cache squid affecting squid-cache squi

CVE-2025-62168: CWE-209: Generation of Error Message Containing Sensitive Information in squid-cache squid - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-62168: CWE-209: Generation of Error Message Containing Sensitive Information in squid-cache squid


CVE-2025-36419: CWE-550 Server-generated Error Message Containing Sensitive Information in IBM ApplinXCVE-2025-36419 0 IBM ApplinX 11.1 could disclose sensitive information about server architecture that could aid in further attacks against the system. MediumVulnerabilityGermanyFranceUnited Kingdom+5#cve #cve-2025-36419 #cwe-550 Join the discussion	CVE Database V5	01/20/2026, 15:53:37 UTC Added: 01/20/2026, 16:05:56 UTC
CVE-2025-62168: CWE-209: Generation of Error Message Containing Sensitive Information in squid-cache squidCVE-2025-62168 0 Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn the credentials a trusted client uses to authenticate. This potentially allows a remote client to identify security tokens or credentials used internally by a web application using Squid for backend load balancing. These attacks do not require Squid to be configured with HTTP authentication. The vulnerability is fixed in version 7.2. As a workaround, disable debug information in administrator mailto links generated by Squid by configuring squid.conf with email_err_data off. CriticalVulnerabilityUnited StatesGermanyUnited Kingdom+12#cve #cve-2025-62168 #cwe-209 Join the discussion	CVE Database V5	10/17/2025, 16:21:30 UTC Added: 10/17/2025, 16:32:02 UTC

Threats Tagged 'cwe-550'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cwe-550'

Lead Pen Test Professional