Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

A missing length check in `ogs_pfcp_subnet_add` function from PFCP library, used by both smf and upf in open5gs 2.7.2 and earlier, allows a local attacker to cause a Buffer Overflow by changing the `session.dnn` field with a value with length greater than 101.

CVE-2025-44952 is a buffer overflow vulnerability identified in the PFCP (Packet Forwarding Control Protocol) library used by Open5GS, an open-source 5G core network implementation. Specifically, the flaw exists in the function `ogs_pfcp_subnet_add`, which is responsible for handling subnet additions within PFCP messages. The vulnerability arises due to a missing length check on the `session.dnn` field, which is intended to hold the Data Network Name (DNN) associated with a session. If a local attacker modifies the `session.dnn` field with a value exceeding 101 characters, the lack of proper bounds checking leads to a buffer overflow condition. This can result in memory corruption, potentially allowing the attacker to execute arbitrary code or cause a denial of service (DoS) by crashing the affected process. The vulnerability affects Open5GS version 2.7.2 and earlier. Both the SMF (Session Management Function) and UPF (User Plane Function) components, which rely on the PFCP library, are impacted. Since the vulnerability requires local access to the system to manipulate the `session.dnn` field, remote exploitation is not directly feasible without prior compromise. No known exploits are currently reported in the wild, and no patches or fixes have been published at the time of disclosure. The absence of a CVSS score indicates that the vulnerability is newly disclosed and has not yet undergone formal severity assessment. However, the technical details suggest a significant risk due to the potential for memory corruption and code execution in critical 5G core network components.

Detailed information about CVE-2025-44952: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2025-44952: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-44952: n/a

Threats Tagged 'cve-2025-44952'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-44952'

Lead Pen Test Professional