Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Release of RHOAI 3.3.3 provides these changes:

CVE-2025-6242 is a vulnerability in the node-forge library used by Red Hat OpenShift AI and other Red Hat products. It involves an interpretation conflict in ASN.1 structure parsing that allows unauthenticated attackers to bypass downstream cryptographic verification and security decisions by crafting malicious ASN.1 data. This leads to semantic divergence in schema validation. The vulnerability is rated important by Red Hat with a CVSS v3 base score of 8.7 (Red Hat rating). It affects cryptographic integrity and confidentiality but does not impact availability. Red Hat has not provided a patch or mitigation that meets their standards for deployment and stability. Updated Red Hat OpenShift AI images (3.3.3) are available, but no direct fix for this CVE is included. Red Hat continues to investigate and may provide fixes in future updates.

Detailed information about Red Hat Security Advisory: RHOAI 3.3.3 - Red Hat OpenShift AI affecting Red Hat Product Security Red Hat. Get real-time updates, tech

Red Hat Security Advisory: RHOAI 3.3.3 - Red Hat OpenShift AI - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2026:19712

https://access.redhat.com/security/cve/CVE-2025-12816

https://access.redhat.com/security/cve/CVE-2025-13465

https://access.redhat.com/security/cve/CVE-2025-15284

https://access.redhat.com/security/cve/CVE-2025-59057

https://access.redhat.com/security/cve/CVE-2025-61726

https://access.redhat.com/security/cve/CVE-2025-61729

https://access.redhat.com/security/cve/CVE-2025-62164

https://access.redhat.com/security/cve/CVE-2025-6242

https://access.redhat.com/security/cve/CVE-2025-62718

https://access.redhat.com/security/cve/CVE-2025-64756

https://access.redhat.com/security/cve/CVE-2025-66031

https://access.redhat.com/security/cve/CVE-2025-66418

https://access.redhat.com/security/cve/CVE-2025-66448

https://access.redhat.com/security/cve/CVE-2025-66471

https://access.redhat.com/security/cve/CVE-2025-69223

https://access.redhat.com/security/cve/CVE-2025-69873

https://access.redhat.com/security/cve/CVE-2026-0846

https://access.redhat.com/security/cve/CVE-2026-0847

https://access.redhat.com/security/cve/CVE-2026-21441

https://access.redhat.com/errata/RHSA-2026:10184

https://access.redhat.com/security/cve/CVE-2025-11157

https://access.redhat.com/security/cve/CVE-2025-12103

https://access.redhat.com/security/cve/CVE-2025-14009

https://access.redhat.com/security/cve/CVE-2025-61728

https://access.redhat.com/security/cve/CVE-2025-68131

https://access.redhat.com/security/cve/CVE-2025-69227

https://access.redhat.com/security/cve/CVE-2025-69228

https://access.redhat.com/security/cve/CVE-2025-69534

https://access.redhat.com/security/cve/CVE-2026-1002

https://access.redhat.com/security/cve/CVE-2026-22773

Red Hat Security Advisory: RHOAI 3.3.3 - Red Hat OpenShift AI

A critical vulnerability exists in the NLTK downloader component of nltk/nltk, affecting all versions. The _unzip_iter function in nltk/downloader.py uses zipfile.extractall() without performing path validation or security checks. This allows attackers to craft malicious zip packages that, when downloaded and extracted by NLTK, can execute arbitrary code. The vulnerability arises because NLTK assumes all downloaded packages are trusted and extracts them without validation. If a malicious package contains Python files, such as __init__.py, these files are executed automatically upon import, leading to remote code execution. This issue can result in full system compromise, including file system access, network access, and potential persistence mechanisms.

CVE-2025-14009 is a critical code injection vulnerability in the nltk/nltk library's downloader component. The _unzip_iter function in nltk/downloader.py uses zipfile.extractall() without performing path validation or security checks, trusting all downloaded packages implicitly. Attackers can craft malicious zip archives containing Python files that execute arbitrary code when extracted and imported by NLTK. This vulnerability enables remote code execution leading to full system compromise, including unauthorized file system and network access. The vulnerability affects all versions of nltk/nltk. Red Hat advisories acknowledge the CVE but do not provide a direct patch for nltk, indicating patch status is not yet confirmed.

Detailed information about CVE-2025-14009: CWE-94 Improper Control of Generation of Code in nltk nltk/nltk affecting nltk nltk/nltk. Get real-time updates, tech

CVE-2025-14009: CWE-94 Improper Control of Generation of Code in nltk nltk/nltk - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-14009: CWE-94 Improper Control of Generation of Code in nltk nltk/nltk


Red Hat Security Advisory: RHOAI 3.3.3 - Red Hat OpenShift AICVE-2025-6242 0 Release of RHOAI 3.3.3 provides these changes: CriticalVulnerability#gcve #csaf #cve-2025-6242 Join the discussion	GCVE Database	05/20/2026, 15:49:06 UTC Added: 05/26/2026, 20:57:56 UTC
CVE-2025-14009: CWE-94 Improper Control of Generation of Code in nltk nltk/nltkCVE-2025-14009 0 A critical vulnerability exists in the NLTK downloader component of nltk/nltk, affecting all versions. The _unzip_iter function in nltk/downloader.py uses zipfile.extractall() without performing path validation or security checks. This allows attackers to craft malicious zip packages that, when downloaded and extracted by NLTK, can execute arbitrary code. The vulnerability arises because NLTK assumes all downloaded packages are trusted and extracts them without validation. If a malicious package contains Python files, such as __init__.py, these files are executed automatically upon import, leading to remote code execution. This issue can result in full system compromise, including file system access, network access, and potential persistence mechanisms. CriticalVulnerability#cve #cve-2025-14009 #cwe-94 Join the discussion	CVE Database V5	02/18/2026, 17:45:17 UTC Added: 02/19/2026, 05:26:15 UTC

Threats Tagged 'cve-2025-14009'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-14009'

Lead Pen Test Professional