Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

CVE Database V5

GCVE Database

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Malware

Reddit Reverse Engineering

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities.

Security Fix(es):

* rubygem-rack: Possible Log Injection in Rack::CommonLogger (CVE-2025-25184)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Red Hat Enterprise Linux 9 Release Notes linked from the References section.

The pcs packages in Red Hat Enterprise Linux 9, which configure Pacemaker and Corosync, were updated to fix a possible log injection vulnerability in the rubygem-rack component's Rack::CommonLogger (CVE-2025-25184). This vulnerability is categorized under CWE-117 (Improper Output Neutralization for Logs). Red Hat has issued a security advisory (RHSA-2025:7085) describing the update and its moderate security impact. The advisory covers multiple Red Hat Enterprise Linux 9 High Availability and Resilient Storage product variants across various architectures. The update is available and users should follow Red Hat's instructions to apply it.

Detailed information about Red Hat Security Advisory: pcs security update affecting Red Hat Product Security Red Hat. Get real-time updates, technical details, 

Red Hat Security Advisory: pcs security update - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2025:7085

https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/9.6_release_notes/index

https://access.redhat.com/security/updates/classification/#moderate

2345301

RHEL-16232

RHEL-44420

RHEL-55441

RHEL-61738

RHEL-61901

RHEL-69040

RHEL-78653

RHEL-79055

RHEL-79160

Canonical URL

Red Hat Security Advisory: pcs security update

Logging for Red Hat OpenShift - 5.9.12
logging-fluentd-container: Possible Log Injection in Rack::CommonLogger [openshift-logging-5.9](CVE-2025-25184)

The vulnerability CVE-2024-12797 in Red Hat OpenShift Logging 5.9.12 concerns a possible log injection flaw in the Rack::CommonLogger component used by the logging-fluentd-container. This issue is categorized under CWE-295 (Improper Certificate Validation) and CWE-117 (Improper Output Neutralization for Logs), indicating weaknesses in logging security that could allow injection of malicious content into logs. The Red Hat advisory RHSA-2025:1985 describes this as a moderate severity issue affecting multiple architectures (x86_64, aarch64, ppc64le, s390x) for Red Hat OpenShift Logging 5 for RHEL 9. While no direct patch is listed in the advisory, Red Hat provides upgrade instructions to apply this errata update via documented procedures for OpenShift Container Platform 4.14 and OpenShift Logging 5.9. The advisory also references related CVEs including CVE-2025-25184.

Detailed information about Red Hat Security Advisory: Logging for Red Hat OpenShift - 5.9.12 affecting Red Hat Product Security Red Hat. Get real-time updates, 

Red Hat Security Advisory: Logging for Red Hat OpenShift - 5.9.12 - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2025:1985

Red Hat Security Advisory: Logging for Red Hat OpenShift - 5.9.12


Red Hat Security Advisory: pcs security updateCVE-2025-25184 0 The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities. Security Fix(es): * rubygem-rack: Possible Log Injection in Rack::CommonLogger (CVE-2025-25184) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 9 Release Notes linked from the References section. MediumVulnerability#gcve #csaf #cve-2025-25184 Join the discussion	GCVE Database	05/13/2025, 08:24:53 UTC Added: 06/25/2026, 21:46:59 UTC
Red Hat Security Advisory: Logging for Red Hat OpenShift - 5.9.12CVE-2024-12797 0 Logging for Red Hat OpenShift - 5.9.12 logging-fluentd-container: Possible Log Injection in Rack::CommonLogger [openshift-logging-5.9](CVE-2025-25184) MediumVulnerability#gcve #csaf #cve-2024-12797 Join the discussion	GCVE Database	03/05/2025, 13:15:01 UTC Added: 06/02/2026, 21:43:37 UTC

Threats Tagged 'cve-2025-25184'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-25184'

Lead Pen Test Professional