Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Zero Day Initiative

Cisco Talos

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Out-of-bounds Read vulnerability in ASR1903、ASR3901 in ASR Lapwing_Linux on Linux (nr_fw modules). This vulnerability is associated with program files Code/nr_fw/DLP/src/NrCgi.C.

This issue affects Lapwing_Linux: before 2025/11/26.

CVE-2025-13735 is an out-of-bounds read vulnerability categorized under CWE-125, found in the ASR Lapwing_Linux operating system used by ASR1903 and ASR3901 devices. The vulnerability resides in the nr_fw kernel modules, specifically in the NrCgi.C source code, which handles certain network-related firmware functions. An out-of-bounds read occurs when the program reads data beyond the allocated buffer boundaries, potentially exposing sensitive memory contents or causing undefined behavior. This flaw can be triggered remotely over the network (AV:N) with low attack complexity (AC:L) and requires low privileges (PR:L) but no user interaction (UI:N). The scope is changed (S:C), meaning exploitation can affect resources beyond the vulnerable component. The impact includes partial loss of confidentiality, integrity, and availability (C:L/I:L/A:L), indicating that attackers may read sensitive data, alter some system states, or cause disruptions. The vulnerability affects all versions of Lapwing_Linux prior to 2025/11/26, with no patches currently available and no known exploits in the wild. The vulnerability's presence in network infrastructure devices makes it a critical concern for organizations relying on ASR hardware for routing or firewalling functions.

Detailed information about CVE-2025-13735: CWE-125 Out-of-bounds Read in ASR Lapwing_Linux affecting ASR Lapwing_Linux. Get real-time updates, technical details

CVE-2025-13735: CWE-125 Out-of-bounds Read in ASR Lapwing_Linux - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-13735: CWE-125 Out-of-bounds Read in ASR Lapwing_Linux

Threats Tagged 'cve-2025-13735'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-13735'

Lead Pen Test Professional