Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

AlienVault OTX General

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Malware

Reddit Reverse Engineering

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

yelp

Red Hat Enterprise Linux (RHEL) ist eine populäre Linux-Distribution.

The vulnerability arises from an overly permissive Content Security Policy in Yelp's yelp-xsl stylesheet, allowing a malicious Flatpak application to open crafted help content through the OpenURI portal. By embedding an untrusted CSS stylesheet within a structured SVG document, attacker-controlled content can bypass Flatpak's sandbox isolation. This causes Yelp to evaluate local XML inclusions and disclose arbitrary user-readable files on the host system via remote CSS resource requests. Exploitation does not require privileges on Yelp or additional user interaction beyond running the malicious Flatpak app. The vulnerability is a cross-boundary information disclosure and a regression of a previously fixed issue (CVE-2025-3155). The fix is applied exclusively in the Yelp application package. Red Hat Enterprise Linux 9 versions prior to the update are affected, and a security update is available to remediate the issue.

Detailed information about Red Hat Security Advisory: yelp security update affecting Red Hat Product Security Red Hat. Get real-time updates, technical details,

Red Hat Security Advisory: yelp security update - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2026:47178

https://access.redhat.com/security/updates/classification/#important

2494110

Canonical URL

https://access.redhat.com/errata/RHSA-2026:47177

WID-SEC-W-2026-2835 - CSAF Version

WID-SEC-2026-2835 - Portal Version

Red Hat Security Advisory RHSA-2026:54571 vom 2026-08-13

SUSE Security Update SUSE-SU-2026:3612-1 vom 2026-08-14

SUSE Security Update SUSE-SU-2026:3613-1 vom 2026-08-14

Oracle Linux Security Advisory ELSA-2026-54575 vom 2026-08-15

Rocky Linux Security Advisory RLSA-2026:54571 vom 2026-08-14

Rocky Linux Security Advisory RLSA-2026:54575 vom 2026-08-15

Rocky Linux Security Advisory RLSA-2026:54576 vom 2026-08-14

openSUSE Security Update OPENSUSE-SU-2026:11504-1 vom 2026-08-14

Oracle Linux Security Advisory ELSA-2026-54571 vom 2026-08-15

SUSE Security Update SUSE-SU-2026:3611-1 vom 2026-08-14

Oracle Linux Security Advisory ELSA-2026-54576 vom 2026-08-15

Red Hat Security Advisory RHSA-2026:57417 vom 2026-08-20

Red Hat Security Advisory RHSA-2026:57775 vom 2026-08-20

Red Hat Enterprise Linux (yelp, dracut): Mehrere Schwachstellen

A vulnerability (CVE-2025-3155) was found in Yelp, the GNOME user help application, that allows help documents to execute arbitrary scripts. This flaw enables malicious users to input crafted help documents that can exfiltrate user files to external environments. The vulnerability requires user interaction and involves an open redirect issue (CWE-601). It has a CVSS v3.1 base score of 7.4 (medium severity) with network attack vector, low complexity, no privileges required, but user interaction is necessary. Red Hat has released patches addressing this issue for Red Hat Enterprise Linux 9.0 and related distributions. No known exploits are reported in the wild.

CVE-2025-3155 is a vulnerability in Yelp, the GNOME help browser, which allows arbitrary script execution via crafted help documents. This can lead to exfiltration of user files by malicious actors who can supply malicious help content. The vulnerability involves an open redirect (CWE-601) that can redirect users to untrusted sites potentially hosting malware or phishing pages. The flaw requires user interaction but no privileges, and the attack scope is changed. Red Hat has rated this vulnerability as Important and issued security updates for affected versions, particularly in Red Hat Enterprise Linux 9.0 variants. The CVSS score is 7.4, reflecting high confidentiality impact but no integrity or availability impact. No mitigations other than patching are currently available.

Detailed information about Red Hat Enterprise Linux (yelp): Schwachstelle ermöglicht Offenlegung von Informationen affecting Bundesamt für Sicherheit in der Inf

Red Hat Enterprise Linux (yelp): Schwachstelle ermöglicht Offenlegung von Informationen - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2025:4450

2357091

A flaw was found in Yelp. The Gnome user help application allows the help document to execute arbitrary scripts. (CVE-2025-3155)


Red Hat Enterprise Linux (yelp, dracut): Mehrere SchwachstellenCVE-2026-13601 0 Red Hat Enterprise Linux (RHEL) ist eine populäre Linux-Distribution. HighVulnerability#gcve #csaf #cve-2026-13601 Join the discussion	GCVE Database	08/13/2026, 22:00:00 UTC Added: 08/03/2026, 21:22:00 UTC
A flaw was found in Yelp. The Gnome user help application allows the help document to execute arbitrary scripts. (CVE-2025-3155)CVE-2025-3155 0 A vulnerability (CVE-2025-3155) was found in Yelp, the GNOME user help application, that allows help documents to execute arbitrary scripts. This flaw enables malicious users to input crafted help documents that can exfiltrate user files to external environments. The vulnerability requires user interaction and involves an open redirect issue (CWE-601). It has a CVSS v3.1 base score of 7.4 (medium severity) with network attack vector, low complexity, no privileges required, but user interaction is necessary. Red Hat has released patches addressing this issue for Red Hat Enterprise Linux 9.0 and related distributions. No known exploits are reported in the wild. MediumVulnerability#gcve #csaf #cve-2025-3155 Join the discussion	GCVE Database	04/03/2025, 14:15:00 UTC Added: 06/09/2026, 10:23:26 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional