Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

perl-YAML-LibYAML

A security vulnerability (CVE-2025-40908) has been identified in the perl-YAML-LibYAML package used in Red Hat Enterprise Linux 9.4 Extended Update Support. The vulnerability involves a file modification issue in the LibYAML Perl bindings. Red Hat has released an important security update to address this issue. The vulnerability is related to CWE-552 (files or directories accessible to unauthorized users).

The vulnerability CVE-2025-40908 affects the perl-YAML-LibYAML package, which is a Perl binding for the LibYAML C library implementing the YAML 1.1 specification. This vulnerability allows unauthorized file modification. Red Hat has issued an important security advisory (RHSA-2025:9338) providing updated packages for Red Hat Enterprise Linux 9.4 Extended Update Support across multiple architectures (x86_64, ppc64le, s390x, aarch64). The advisory references a patch that fixes the file modification vulnerability. No CVSS score is provided in the advisory, but the severity is rated as important by Red Hat and high in the input data. No known exploits in the wild have been reported.

Detailed information about Red Hat Security Advisory: perl-YAML-LibYAML security update affecting Red Hat Product Security Red Hat. Get real-time updates, techn

Red Hat Security Advisory: perl-YAML-LibYAML security update - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2025:9338

https://access.redhat.com/security/updates/classification/#important

2369630

Canonical URL

Red Hat Security Advisory: perl-YAML-LibYAML security update

YAML-LibYAML prior to 0.903.0 for Perl uses 2-args open, allowing existing files to be modified

CVE-2025-40908 is a critical security vulnerability identified in the YAML::LibYAML Perl module maintained by the TINITA project. The vulnerability arises from the use of a two-argument form of the open() function in versions prior to 0.903.0. This legacy usage allows an attacker to open existing files for writing without proper safeguards, enabling unauthorized modification of files. The underlying issue is classified under CWE-552, which pertains to files or directories being accessible to external parties, potentially leading to unauthorized data modification. The vulnerability has a CVSS v3.1 base score of 9.1, indicating a critical severity level. The vector metrics (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) reveal that the vulnerability is remotely exploitable over the network without any privileges or user interaction, and it impacts confidentiality and integrity to a high degree, though it does not affect availability. Exploitation could allow attackers to overwrite or tamper with sensitive files, potentially leading to data breaches, unauthorized code execution, or disruption of application logic relying on YAML configurations. No known exploits are currently reported in the wild, and no official patches have been linked yet, emphasizing the need for immediate attention from users of the affected module. The vulnerability affects all versions prior to 0.903.0, with the affectedVersions field indicating '0' which likely means all versions before the fixed release. This issue is particularly critical for environments where YAML::LibYAML is used to parse or manage configuration files or data that influence system behavior or security controls.

Detailed information about CVE-2025-40908: CWE-552 Files or Directories Accessible to External Parties in TINITA YAML::LibYAML affecting TINITA YAML::LibYAML. G

CVE-2025-40908: CWE-552 Files or Directories Accessible to External Parties in TINITA YAML::LibYAML - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-40908: CWE-552 Files or Directories Accessible to External Parties in TINITA YAML::LibYAML


Red Hat Security Advisory: perl-YAML-LibYAML security updateCVE-2025-40908 0 A security vulnerability (CVE-2025-40908) has been identified in the perl-YAML-LibYAML package used in Red Hat Enterprise Linux 9.4 Extended Update Support. The vulnerability involves a file modification issue in the LibYAML Perl bindings. Red Hat has released an important security update to address this issue. The vulnerability is related to CWE-552 (files or directories accessible to unauthorized users). HighVulnerability#gcve #csaf #cve-2025-40908 Join the discussion	GCVE Database	06/23/2025, 02:53:56 UTC Added: 06/27/2026, 22:08:32 UTC
CVE-2025-40908: CWE-552 Files or Directories Accessible to External Parties in TINITA YAML::LibYAMLCVE-2025-40908 0 YAML-LibYAML prior to 0.903.0 for Perl uses 2-args open, allowing existing files to be modified CriticalVulnerabilityGermanyFranceNetherlands+5#cve #cve-2025-40908 #cwe-552 Join the discussion	CVE Database V5	06/01/2025, 13:41:48 UTC Added: 06/01/2025, 13:43:12 UTC

Threats Tagged 'cve-2025-40908'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-40908'

Lead Pen Test Professional