Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

389-ds-base

Red Hat Directory Server is an LDAPv3-compliant directory server. The image is maintained by Red Hat and updated regularly.
To pull this container image, run the following command: podman pull registry.redhat.io/dirsrv/dirsrv-container-rhel10:13.1

CVE-2025-14905 is a heap buffer overflow vulnerability in the 389-ds-base server component of Red Hat Directory Server. The flaw is located in the schema_attr_enum_callback function within schema.c, where buffer size is miscalculated by summing alias string lengths without accounting for additional formatting characters. When processing many aliases, this leads to a heap overflow. The vulnerability can be exploited by authenticated users with high privileges to cause denial of service or remote code execution. Red Hat rates this vulnerability as Moderate severity and notes that exploitation requires administrative privileges, thus limiting the attack surface. The advisory recommends restricting network access to trusted hosts and limiting administrative access with strong authentication. A container image for version 13.1 is available as a Technology Preview, but no fix has been released yet. Patch availability is indicated but no specific fix version is stated in the advisory.

Detailed information about Red Hat Security Advisory: 389-ds-base security update affecting Red Hat Product Security Red Hat. Get real-time updates, technical d

Red Hat Security Advisory: 389-ds-base security update - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2026:3379

https://access.redhat.com/security/cve/CVE-2025-14905

https://access.redhat.com/security/updates/classification/

https://access.redhat.com/support/offerings/techpreview

https://catalog.redhat.com/software/containers/search

https://docs.redhat.com/en/documentation/red_hat_directory_server/13/html/red_hat_directory_server_13_release_notes/index

Canonical URL

Red Hat Security Advisory: Red Hat Directory Server 13.1 container image available as a Technology Preview

A flaw was found in the 389-ds-base server. A heap buffer overflow vulnerability exists in the `schema_attr_enum_callback` function within the `schema.c` file. This occurs because the code incorrectly calculates the buffer size by summing alias string lengths without accounting for additional formatting characters. When a large number of aliases are processed, this oversight can lead to a heap overflow, potentially allowing a remote attacker to cause a Denial of Service (DoS) or achieve Remote Code Execution (RCE).

A heap buffer overflow vulnerability exists in the schema_attr_enum_callback function of the 389-ds-base server component in Red Hat Directory Server 11.5 E4S for RHEL 8. The vulnerability arises because the code sums alias string lengths without accounting for additional formatting characters, causing an incorrect buffer size calculation. When processing a large number of aliases, this can lead to a heap overflow, enabling a remote attacker to cause Denial of Service or potentially execute arbitrary code remotely. Red Hat has issued security advisories RHSA-2026:3189 and RHSA-2026:3208 with updated 389-ds-base packages that fix this issue for Red Hat Enterprise Linux 9 and 10 respectively. The vulnerability affects versions >=9.0.0 <9.8 and >=10.0.0 <10.2 of the 389-ds-base package. The CVSS score is 7.2 (AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H), reflecting high impact on confidentiality, integrity, and availability.

Detailed information about CVE-2025-14905: Heap-based Buffer Overflow in Red Hat Red Hat Directory Server 11 affecting Red Hat Red Hat Directory Server 11. Get 

CVE-2025-14905: Heap-based Buffer Overflow in Red Hat Red Hat Directory Server 11 - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-14905: Heap-based Buffer Overflow in Red Hat Red Hat Directory Server 11.5 E4S for RHEL 8


Red Hat Security Advisory: Red Hat Directory Server 13.1 container image available as a Technology PreviewCVE-2025-14905 0 Red Hat Directory Server is an LDAPv3-compliant directory server. The image is maintained by Red Hat and updated regularly. To pull this container image, run the following command: podman pull registry.redhat.io/dirsrv/dirsrv-container-rhel10:13.1 MediumVulnerability#gcve #csaf #cve-2025-14905 Join the discussion	GCVE Database	02/25/2026, 20:03:51 UTC Added: 06/25/2026, 21:46:40 UTC
CVE-2025-14905: Heap-based Buffer Overflow in Red Hat Red Hat Directory Server 11.5 E4S for RHEL 8CVE-2025-14905 0 A flaw was found in the 389-ds-base server. A heap buffer overflow vulnerability exists in the `schema_attr_enum_callback` function within the `schema.c` file. This occurs because the code incorrectly calculates the buffer size by summing alias string lengths without accounting for additional formatting characters. When a large number of aliases are processed, this oversight can lead to a heap overflow, potentially allowing a remote attacker to cause a Denial of Service (DoS) or achieve Remote Code Execution (RCE). HighVulnerability#cve #cve-2025-14905 Join the discussion	CVE Database V5	02/23/2026, 15:41:47 UTC Added: 02/23/2026, 16:08:59 UTC

Threats Tagged 'cve-2025-14905'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-14905'

Lead Pen Test Professional