Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

GCVE Database

CVE Database V5

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

AlienVault OTX General

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

This security update for Python 3.13 addresses multiple header injection vulnerabilities affecting email and HTTP header processing. The issues include injection via long email comments, user-controlled data URLs, cookie values, and improper newline quoting during email serialization. The update also includes various bug fixes and performance improvements unrelated to security. No explicit patch status is provided, but the update to version 3.13.12 indicates these vulnerabilities have been fixed in that release.

The update to Python 3.13.12 fixes several security issues involving header injection vulnerabilities: CVE-2025-11468 addresses header injection when folding long email comments with unfoldable characters; CVE-2025-15282 involves injection via user-controlled data URLs; CVE-2026-0672 concerns HTTP header injection through user-controlled cookie values and parameters using http.cookies.Morsel; CVE-2026-0865 relates to injection via user-controlled headers containing newlines; and CVE-2026-1299 involves header injection during email serialization due to improper newline quoting in BytesGenerator. These vulnerabilities could allow attackers to inject malicious headers in email or HTTP contexts. The update also includes numerous other bug fixes and performance improvements.

Detailed information about Security update for python313 affecting SUSE Product Security Team SUSE. Get real-time updates, technical details, and mitigation str

Security update for python313 - Live Threat Intelligence - Threat Radar | OffSeq.com

SUSE ratings

URL of this CSAF notice

SUSE Bug 1257029

SUSE Bug 1257031

SUSE Bug 1257042

SUSE Bug 1257046

SUSE Bug 1257181

SUSE CVE CVE-2025-11468 page

SUSE CVE CVE-2025-15282 page

SUSE CVE CVE-2026-0672 page

SUSE CVE CVE-2026-0865 page

SUSE CVE CVE-2026-1299 page

Security update for python313

cpython

CPython

User-controlled data URLs parsed by urllib.request.DataHandler allow injecting headers through newlines in the data URL mediatype.

CVE-2025-15282 is a vulnerability identified in the Python Software Foundation's CPython interpreter, specifically affecting the urllib.request.DataHandler module. The issue arises from the way user-controlled data URLs are parsed: the media type portion of the data URL can contain newline characters, which are not properly sanitized or neutralized. This allows an attacker to inject arbitrary HTTP headers by embedding CRLF (carriage return and line feed) sequences within the media type string. Such injection can lead to HTTP response splitting or other header injection attacks, potentially enabling cache poisoning, cross-site scripting (XSS), or session fixation attacks depending on the context in which the headers are used. The vulnerability is categorized under CWE-93, which deals with improper neutralization of CRLF sequences in HTTP headers. The affected versions include all CPython releases from 0 through 3.15.0a1, indicating a long-standing issue that spans multiple major releases. The CVSS 4.0 base score is 6.0 (medium severity), reflecting that the attack vector is network-based with low complexity, requires partial privileges, no user interaction, and results in high impact on integrity but no impact on confidentiality or availability. No known exploits have been reported in the wild as of the published date. The vulnerability was reserved late December 2025 and published in January 2026. No official patches or fixes are linked yet, so users must monitor Python releases for updates. This vulnerability is particularly relevant for applications that rely on urllib.request to process untrusted or user-supplied data URLs, such as web scrapers, API clients, or web frameworks embedding Python.

Detailed information about CVE-2025-15282: CWE-93 in Python Software Foundation CPython affecting Python Software Foundation CPython. Get real-time updates, tec

CVE-2025-15282: CWE-93 in Python Software Foundation CPython - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-15282: CWE-93 in Python Software Foundation CPython

python

If the value passed to os.path.expandvars() is user-controlled a 
performance degradation is possible when expanding environment 
variables.

The advisory details multiple security flaws in Python 3.12 and related components as shipped by Red Hat, including CVE-2025-6075 which involves quadratic complexity in os.path.expandvars() when processing user-controlled templates, potentially leading to resource exhaustion. Other issues include out-of-memory conditions when loading Plist files (CVE-2025-13837), header injection via newlines in data URL mediatype and http.cookies.Morsel, logging bypass in legacy .pyc file handling, incomplete control character validation in http.cookies, and stack overflow parsing XML. These vulnerabilities affect various Red Hat Enterprise Linux versions and related container images. Red Hat has updated the affected components and container images, recommending deployment via the rhui-installer utility. The advisory includes a comprehensive list of CVEs and CWE identifiers related to resource exhaustion, injection, and memory corruption issues.

Detailed information about Red Hat Security Advisory: Red Hat Update Infrastructure 5.1 security update affecting Red Hat Product Security Red Hat. Get real-tim

Red Hat Security Advisory: Red Hat Update Infrastructure 5.1 security update - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2026:21275

https://access.redhat.com/products/red-hat-update-infrastructure

https://access.redhat.com/security/cve/CVE-2025-13837

https://access.redhat.com/security/cve/CVE-2025-14087

https://access.redhat.com/security/cve/CVE-2025-14512

https://access.redhat.com/security/cve/CVE-2025-15282

https://access.redhat.com/security/cve/CVE-2025-59375

https://access.redhat.com/security/cve/CVE-2025-6075

https://access.redhat.com/security/cve/CVE-2026-0672

https://access.redhat.com/security/cve/CVE-2026-0865

https://access.redhat.com/security/cve/CVE-2026-1502

https://access.redhat.com/security/cve/CVE-2026-2100

https://access.redhat.com/security/cve/CVE-2026-2297

https://access.redhat.com/security/cve/CVE-2026-29111

https://access.redhat.com/security/cve/CVE-2026-31790

https://access.redhat.com/security/cve/CVE-2026-34982

https://access.redhat.com/security/cve/CVE-2026-35385

https://access.redhat.com/security/cve/CVE-2026-35386

https://access.redhat.com/security/cve/CVE-2026-35387

https://access.redhat.com/security/cve/CVE-2026-35388

https://access.redhat.com/errata/RHSA-2026:7443

https://images.redhat.com/

https://access.redhat.com/security/cve/CVE-2026-5713

https://access.redhat.com/security/updates/classification/

https://access.redhat.com/security/cve/CVE-2026-4224

https://access.redhat.com/security/cve/CVE-2026-3644

https://access.redhat.com/security/cve/CVE-2026-1299

https://access.redhat.com/security/cve/CVE-2025-13836

https://access.redhat.com/security/cve/CVE-2025-13462

https://access.redhat.com/security/cve/CVE-2025-11468

https://access.redhat.com/security/cve/CVE-2025-8291

https://access.redhat.com/security/cve/CVE-2025-12084

https://access.redhat.com/security/cve/CVE-2026-3446

https://access.redhat.com/security/cve/CVE-2026-3479

https://access.redhat.com/security/cve/CVE-2026-4519

https://access.redhat.com/errata/RHSA-2026:10950

https://access.redhat.com/security/updates/classification/#important

2395108

2408891

2418084

2431366

2431374

2444691

2448168

2448181

2457409

2457932

2458049

Canonical URL

https://access.redhat.com/errata/RHSA-2026:19064

2449649

https://access.redhat.com/errata/RHSA-2026:8824

https://access.redhat.com/security/cve/CVE-2025-15367

https://access.redhat.com/security/cve/CVE-2026-4786

https://access.redhat.com/security/cve/CVE-2026-6100

https://access.redhat.com/errata/RHSA-2026:19177

https://access.redhat.com/errata/RHSA-2026:7661

https://access.redhat.com/errata/RHSA-2026:8822

https://access.redhat.com/security/cve/CVE-2025-15366

Python: Quadratic complexity in os.path.expandvars() with user-controlled template (CVE-2025-6075)


Security update for python313CVE-2025-11468 0 This security update for Python 3.13 addresses multiple header injection vulnerabilities affecting email and HTTP header processing. The issues include injection via long email comments, user-controlled data URLs, cookie values, and improper newline quoting during email serialization. The update also includes various bug fixes and performance improvements unrelated to security. No explicit patch status is provided, but the update to version 3.13.12 indicates these vulnerabilities have been fixed in that release. HighVulnerability#gcve #csaf #cve-2025-11468 Join the discussion	GCVE Database	02/19/2026, 10:31:04 UTC Added: 09/17/2026, 01:59:50 UTC
CVE-2025-15282: CWE-93 in Python Software Foundation CPythonCVE-2025-15282 0 User-controlled data URLs parsed by urllib.request.DataHandler allow injecting headers through newlines in the data URL mediatype. MediumVulnerabilityUnited StatesGermanyUnited Kingdom+7#cve #cve-2025-15282 #cwe-93 Join the discussion	CVE Database V5	01/20/2026, 21:35:13 UTC Added: 01/20/2026, 21:50:58 UTC
Python: Quadratic complexity in os.path.expandvars() with user-controlled template (CVE-2025-6075)CVE-2025-6075 0 If the value passed to os.path.expandvars() is user-controlled a performance degradation is possible when expanding environment variables. MediumVulnerability#gcve #csaf #cve-2025-6075 Join the discussion	GCVE Database	12/05/2025, 11:13:34 UTC Added: 05/27/2026, 21:15:15 UTC

Threats Tagged 'cve-2025-15282'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-15282'

Lead Pen Test Professional