Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Krebs on Security

Palo Alto Unit 42

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

A flaw was found in the exsltFuncResultComp() function of libxslt, which handles EXSLT <func:result> elements during stylesheet parsing. Due to improper type handling, the function may treat an XML document node as a regular XML element node, resulting in a type confusion. This can cause unexpected memory reads and potential crashes. While difficult to exploit, the flaw could lead to application instability or denial of service.

The vulnerability CVE-2025-11731 affects the exsltFuncResultComp() function in libxslt, which processes EXSLT <func:result> elements during XML stylesheet parsing. Due to improper type handling, the function may confuse an XML document node with an XML element node, causing type confusion. This flaw can result in unexpected memory reads and potentially cause application crashes, leading to denial of service conditions. The vulnerability has a CVSS 3.1 base score of 3.1, indicating low severity, with network attack vector, high attack complexity, no privileges required, and user interaction needed. Red Hat has released updated libxslt RPM packages (version 1.1.45-0.1.hum1) for Red Hat Hardened Images to address this issue. The vendor advisories confirm the availability of patches and recommend applying the updates to remediate the vulnerability.

Detailed information about CVE-2025-11731: Access of Resource Using Incompatible Type ('Type Confusion') in Red Hat Red Hat Enterprise Linux 10 affecting Red Ha

CVE-2025-11731: Access of Resource Using Incompatible Type ('Type Confusion') in Red Hat Red Hat Enterprise Linux 10 - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-11731: Access of Resource Using Incompatible Type ('Type Confusion')

The libxml2 library is a development toolbox providing the implementation of various XML standards.

Bug Fix(es) and Enhancement(s):

* libxslt: Type confusion in xmlNode.psvi between stylesheet and source nodes [rhel-10.0.z] (JIRA:RHEL-102746)

* libxslt: Heap Use-After-Free in libxslt caused by atype corruption in xmlAttrPtr [rhel-10.0.z] (JIRA:RHEL-102794)

The libxml2 library, which implements various XML standards, had two vulnerabilities in its libxslt component affecting Red Hat Enterprise Linux 10. The first is a type confusion vulnerability in the xmlNode.psvi field that causes confusion between stylesheet and source nodes (JIRA:RHEL-102746). The second is a heap use-after-free vulnerability caused by corruption of the attribute pointer (xmlAttrPtr) (JIRA:RHEL-102794). These issues are tracked as CVE-2025-7424 and CVE-2025-7425 respectively and are categorized under CWE-843 (Type Confusion), CWE-416 (Use After Free), and CWE-825 (Expansion of Memory). Red Hat has released updated libxml2 and libxslt packages for Red Hat Enterprise Linux 10 and related product variants to fix these vulnerabilities. The advisory references RHBA-2025:12345 and RHSA-2026:11015 for details on the fixes and update procedures.

Detailed information about Red Hat Bug Fix Advisory: libxml2 and libxslt bug fix and enhancement update affecting Red Hat Product Security Red Hat. Get real-tim

Access of Resource Using Incompatible Type ('Type Confusion') in GNOME libxslt (CVE-2025-7424) - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHBA-2025:12345

Canonical URL

https://access.redhat.com/errata/RHSA-2026:11015

https://images.redhat.com/

https://access.redhat.com/security/cve/CVE-2025-7424

https://access.redhat.com/security/updates/classification/

https://access.redhat.com/security/cve/CVE-2025-10911

https://access.redhat.com/security/cve/CVE-2025-11731

Red Hat Bug Fix Advisory: libxml2 and libxslt bug fix and enhancement update


CVE-2025-11731: Access of Resource Using Incompatible Type ('Type Confusion')CVE-2025-11731 0 A flaw was found in the exsltFuncResultComp() function of libxslt, which handles EXSLT <func:result> elements during stylesheet parsing. Due to improper type handling, the function may treat an XML document node as a regular XML element node, resulting in a type confusion. This can cause unexpected memory reads and potential crashes. While difficult to exploit, the flaw could lead to application instability or denial of service. LowVulnerability#cve #cve-2025-11731 #gcve Join the discussion	CVE Database V5	10/14/2025, 06:02:35 UTC Added: 10/14/2025, 06:19:03 UTC
Red Hat Bug Fix Advisory: libxml2 and libxslt bug fix and enhancement updateCVE-2025-7424 0 The libxml2 library is a development toolbox providing the implementation of various XML standards. Bug Fix(es) and Enhancement(s): * libxslt: Type confusion in xmlNode.psvi between stylesheet and source nodes [rhel-10.0.z] (JIRA:RHEL-102746) * libxslt: Heap Use-After-Free in libxslt caused by atype corruption in xmlAttrPtr [rhel-10.0.z] (JIRA:RHEL-102794) HighVulnerability#gcve #csaf #cve-2025-7424 Join the discussion	GCVE Database	07/31/2025, 06:33:50 UTC Added: 06/02/2026, 21:43:35 UTC

Threats Tagged 'cve-2025-11731'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-11731'

Lead Pen Test Professional