Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

libxslt

A use-after-free vulnerability was found in libxslt while parsing xsl nodes that may lead to the dereference of expired pointers and application crash.

CVE-2025-10911 is a use-after-free vulnerability in libxslt related to key data stored cross-RVT. libxslt is a library for transforming XML files into other textual formats using XSLT. Red Hat Product Security has released an update for Red Hat Enterprise Linux 9 to fix this issue, which is rated as having moderate security impact. The advisory includes updated libxslt packages for multiple architectures and variants of Red Hat Enterprise Linux 9, including Extended Update Support and Extended Life Cycle versions. The vulnerability is tracked under Red Hat advisory RHSA-2026:28243.

Detailed information about Red Hat Security Advisory: libxslt security update affecting Red Hat Product Security Red Hat. Get real-time updates, technical detai

Libxslt: Expired Pointer Dereference (CVE-2025-10911) - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2026:28584

https://access.redhat.com/security/updates/classification/#moderate

2397838

Canonical URL

https://access.redhat.com/errata/RHSA-2026:26355

https://access.redhat.com/errata/RHSA-2026:28243

CVE-2025-10911: Expired Pointer Dereference

A use-after-free vulnerability exists in numbers.c of libxslt before version 1.1.43. This occurs during nested XPath evaluations where the XPath context node can be modified but not restored, affecting functions such as xsltNumberFormatGetValue and xsltEvalXPathPredicate. The vulnerability has been assigned CVE-2025-24855 and is rated as high severity. A patch is available from Red Hat and other vendors to address this issue.

CVE-2025-24855 describes a use-after-free vulnerability in libxslt's numbers.c component prior to version 1.1.43. The flaw arises because, during nested XPath evaluations, the XPath context node is modified but never restored, leading to potential memory corruption. The affected functions include xsltNumberFormatGetValue, xsltEvalXPathPredicate, xsltEvalXPathStringNs, and xsltComputeSortResultInternal. Red Hat has issued an advisory and released patches to fix this vulnerability in their Enterprise Linux distributions.

Red Hat Security Advisory: libxslt security update - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2025:3107

https://access.redhat.com/security/updates/classification/#important

2352483

https://access.redhat.com/errata/RHSA-2025:3389

https://access.redhat.com/errata/RHSA-2025:3528

Jre: numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never… (CVE-2025-24855)


CVE-2025-10911: Expired Pointer DereferenceCVE-2025-10911 0 A use-after-free vulnerability was found in libxslt while parsing xsl nodes that may lead to the dereference of expired pointers and application crash. MediumVulnerability#gcve #csaf #cve-2025-10911 Join the discussion	GCVE Database	06/23/2026, 20:10:09 UTC Added: 06/24/2026, 16:59:26 UTC
Jre: numbers.c in libxslt before 1.1.43 has a use-after-free because, in nested XPath evaluations, an XPath context node can be modified but never… (CVE-2025-24855)CVE-2025-24855 0 A use-after-free vulnerability exists in numbers.c of libxslt before version 1.1.43. This occurs during nested XPath evaluations where the XPath context node can be modified but not restored, affecting functions such as xsltNumberFormatGetValue and xsltEvalXPathPredicate. The vulnerability has been assigned CVE-2025-24855 and is rated as high severity. A patch is available from Red Hat and other vendors to address this issue. HighVulnerability#gcve #csaf #cve-2025-24855 Join the discussion	GCVE Database	05/08/2026, 05:46:57 UTC Added: 07/12/2026, 09:18:55 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional