Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

CVE Database V5

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

libwebsockets

Stack-based Buffer Overflow in lws_adns_parse_label in warmcat libwebsockets allows, when the LWS_WITH_SYS_ASYNC_DNS flag is enabled during compilation, to overflow the label_stack, when the attacker is able to sniff a DNS request in order to craft a response with a matching id containing a label longer than the maximum.

CVE-2025-11678 is a stack-based buffer overflow vulnerability identified in the warmcat libwebsockets library, version 4.0, specifically within the lws_adns_parse_label function. This function is responsible for parsing DNS labels when the library is compiled with the LWS_WITH_SYS_ASYNC_DNS flag enabled, which enables asynchronous DNS resolution. The vulnerability arises because the label_stack buffer can be overflowed if an attacker crafts a DNS response containing a label longer than the maximum expected length. To exploit this, an attacker must be capable of sniffing DNS requests to obtain the matching DNS transaction ID, then respond with a maliciously crafted DNS packet that triggers the overflow. The overflow can corrupt the stack, potentially allowing an attacker to execute arbitrary code or cause a denial of service by crashing the application. The CVSS 4.0 score of 7.5 reflects a high severity, with attack vector being adjacent (local network), low attack complexity, no privileges required, but user interaction needed. The vulnerability impacts confidentiality, integrity, and availability with high impact. No known public exploits exist yet, but the vulnerability is published and should be treated seriously. The lack of available patches at the time of publication necessitates immediate mitigation steps. This vulnerability is particularly relevant for applications relying on libwebsockets for network communication, especially those using asynchronous DNS resolution in environments where DNS traffic can be intercepted or manipulated.

Detailed information about CVE-2025-11678: CWE-121 Stack-based Buffer Overflow in warmcat libwebsocket affecting warmcat libwebsocket. Get real-time updates, te

CVE-2025-11678: CWE-121 Stack-based Buffer Overflow in warmcat libwebsocket - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-11678: CWE-121 Stack-based Buffer Overflow in warmcat libwebsocket

Threats Tagged 'cve-2025-11678'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-11678'

Lead Pen Test Professional