Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

AlienVault OTX General

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

libxml2

Technology Preview features are not fully supported, may not be functionally complete, and are not suitable for deployment in production.

CVE-2024-34459 is a buffer over-read vulnerability in the xmllint program from the libxml2 package. The flaw occurs in the xmlHTMLPrintFileContext function within xmllint.c when processing crafted files with the --htmlout command line option, potentially causing an application crash and denial of service. This vulnerability is limited to the xmllint program when invoked with --htmlout and does not affect other uses of libxml2 or applications that do not expose xmllint. Red Hat's advisory for Red Hat Update Infrastructure 5.2 includes updated container images incorporating the latest RHUI RPM packages and base images, which address this and multiple other CVEs. No explicit patch details are provided in the advisory, but deployment of updated container images via the rhui-installer utility is recommended.

Detailed information about Red Hat Security Advisory: libxml2 security update affecting Red Hat Product Security Red Hat. Get real-time updates, technical detai

Red Hat Security Advisory: libxml2 security update - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2026:44481

https://access.redhat.com/products/red-hat-update-infrastructure

https://access.redhat.com/security/cve/CVE-2024-34459

https://access.redhat.com/security/cve/CVE-2025-10911

https://access.redhat.com/security/cve/CVE-2025-13151

https://access.redhat.com/security/cve/CVE-2025-5278

https://access.redhat.com/security/cve/CVE-2025-6170

https://access.redhat.com/security/cve/CVE-2026-15308

https://access.redhat.com/security/cve/CVE-2026-31790

https://access.redhat.com/security/cve/CVE-2026-41411

https://access.redhat.com/security/cve/CVE-2026-42055

https://access.redhat.com/security/cve/CVE-2026-44431

https://access.redhat.com/security/cve/CVE-2026-44432

https://access.redhat.com/security/cve/CVE-2026-48864

https://access.redhat.com/security/cve/CVE-2026-5435

https://access.redhat.com/security/cve/CVE-2026-54369

https://access.redhat.com/security/cve/CVE-2026-54370

https://access.redhat.com/security/cve/CVE-2026-5450

https://access.redhat.com/security/cve/CVE-2026-58016

https://access.redhat.com/security/cve/CVE-2026-5928

https://access.redhat.com/errata/RHSA-2026:33313

https://access.redhat.com/security/cve/CVE-2025-71319

https://access.redhat.com/security/cve/CVE-2026-33416

https://access.redhat.com/security/cve/CVE-2026-33636

https://access.redhat.com/security/cve/CVE-2026-8643

https://access.redhat.com/security/cve/CVE-2026-9256

https://access.redhat.com/security/updates/classification/

https://docs.redhat.com/en/documentation/subscription_central/1-latest/#Discovery

Canonical URL

https://access.redhat.com/errata/RHSA-2026:34102

https://access.redhat.com/security/cve/CVE-2026-34180

https://access.redhat.com/security/cve/CVE-2026-34181

https://access.redhat.com/security/cve/CVE-2026-34182

https://access.redhat.com/security/cve/CVE-2026-34183

https://access.redhat.com/security/cve/CVE-2026-35177

https://access.redhat.com/security/cve/CVE-2026-42764

https://access.redhat.com/security/cve/CVE-2026-42766

https://access.redhat.com/security/cve/CVE-2026-42767

https://access.redhat.com/security/cve/CVE-2026-42768

https://access.redhat.com/security/cve/CVE-2026-42769

https://access.redhat.com/security/cve/CVE-2026-42770

https://access.redhat.com/security/cve/CVE-2026-45445

https://access.redhat.com/security/cve/CVE-2026-45446

https://access.redhat.com/security/cve/CVE-2026-45447

https://access.redhat.com/errata/RHSA-2026:26354

https://access.redhat.com/security/updates/classification/#low

2280532

https://access.redhat.com/errata/RHSA-2026:27736

https://access.redhat.com/errata/RHSA-2026:58981

https://access.redhat.com/articles/7141172

https://access.redhat.com/security/cve/CVE-2025-13837

https://access.redhat.com/security/cve/CVE-2025-14087

https://access.redhat.com/security/cve/CVE-2025-14512

https://access.redhat.com/security/cve/CVE-2025-15282

https://access.redhat.com/security/cve/CVE-2025-59375

https://access.redhat.com/security/cve/CVE-2025-6075

https://access.redhat.com/security/cve/CVE-2026-0672

https://access.redhat.com/security/cve/CVE-2026-0865

https://access.redhat.com/security/cve/CVE-2026-11940

https://access.redhat.com/security/cve/CVE-2026-13757

https://access.redhat.com/security/cve/CVE-2026-14164

https://access.redhat.com/security/cve/CVE-2026-1502

Red Hat Security Advisory: Red Hat Update Infrastructure 5.3 Technology Preview security update

This update for libtasn1 fixes the following issues:

- CVE-2025-13151: lack of validation of input data size leads to stack-based buffer overflow in
  `asn1_expend_octet_string` (bsc#1256341).

CVE-2025-13151 is a stack-based buffer overflow vulnerability in the libtasn1 library, specifically in the asn1_expend_octet_string function. The issue arises from a failure to properly validate the size of input data, allowing a remote attacker to trigger a denial of service by crashing applications that use libtasn1. Red Hat has classified this vulnerability as low severity and notes that no suitable mitigation or fix currently meets their standards for deployment. The vulnerability affects Red Hat Hardened Images RPMs including libtasn1 versions 4.21.0-1.1.hum1 for aarch64 and x86_64 architectures.

Detailed information about Red Hat Security Advisory: libtasn1 security update affecting Red Hat Product Security Red Hat. Get real-time updates, technical deta

Red Hat Security Advisory: libtasn1 security update - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2026:7500

https://images.redhat.com/

Reference

https://access.redhat.com/errata/RHSA-2026:28235

2427698

https://access.redhat.com/errata/RHSA-2026:28253

https://access.redhat.com/errata/RHSA-2026:36728

SUSE ratings

URL of this CSAF notice

SUSE Bug 1256341

SUSE CVE CVE-2025-13151 page

Security update for libtasn1

Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data resulting in a buffer overflow in asn1_expend_octet_string.

CVE-2025-13151 is a stack-based buffer overflow vulnerability identified in the libtasn1 library version 4.20.0, a component of the widely used GnuTLS cryptographic library. The vulnerability arises from improper input size validation in the function asn1_expend_octet_string, which processes ASN.1 octet strings. ASN.1 is a standard interface description language for defining data structures used in cryptography and network protocols. The failure to check the size of input data before copying it into a fixed-size buffer leads to a classic buffer overflow (CWE-120), which can overwrite adjacent memory on the stack. This can cause application crashes or potentially allow an attacker to execute arbitrary code, depending on the exploitation context. The CVSS v3.1 score of 7.5 reflects a high severity, with an attack vector of network (AV:N), low attack complexity (AC:L), no privileges required (PR:N), no user interaction (UI:N), unchanged scope (S:U), and impact limited to availability (A:H) without affecting confidentiality or integrity. This suggests the primary impact is denial of service, though code execution cannot be ruled out without further details. No known exploits are currently reported in the wild, but the vulnerability is publicly disclosed and should be considered a serious risk for applications using libtasn1, including VPNs, mail servers, and other TLS-enabled services. The lack of an available patch at the time of disclosure necessitates immediate risk mitigation strategies. The vulnerability affects all deployments using the vulnerable libtasn1 version, which is common in open-source environments and embedded systems.

Detailed information about CVE-2025-13151: CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') in GnuTLS libtasn1 affecting GnuTLS li

CVE-2025-13151: CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') in GnuTLS libtasn1 - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-13151: CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') in GnuTLS libtasn1


Red Hat Security Advisory: Red Hat Update Infrastructure 5.3 Technology Preview security updateCVE-2024-34459 0 Technology Preview features are not fully supported, may not be functionally complete, and are not suitable for deployment in production. CriticalVulnerability#gcve #csaf #cve-2024-34459 Join the discussion	GCVE Database	08/24/2026, 11:15:22 UTC Added: 06/22/2026, 15:51:33 UTC
Security update for libtasn1CVE-2025-13151 0 This update for libtasn1 fixes the following issues: - CVE-2025-13151: lack of validation of input data size leads to stack-based buffer overflow in `asn1_expend_octet_string` (bsc#1256341). MediumVulnerability#gcve #csaf #cve-2025-13151 Join the discussion	GCVE Database	04/07/2026, 14:33:05 UTC Added: 06/24/2026, 00:43:41 UTC
CVE-2025-13151: CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') in GnuTLS libtasn1CVE-2025-13151 0 Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data resulting in a buffer overflow in asn1_expend_octet_string. HighVulnerabilityGermanyFranceUnited Kingdom+6#cve #cve-2025-13151 #cwe-120 Join the discussion	CVE Database V5	01/07/2026, 21:14:05 UTC Added: 01/07/2026, 21:32:39 UTC

Threats Tagged 'cve-2025-13151'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-13151'

Lead Pen Test Professional