Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

The libxml2 library is a development toolbox providing the implementation of various XML standards.

Security Fix(es):

* libxml: Heap use after free (UAF) leads to Denial of service (DoS) (CVE-2025-49794)

* libxml: Type confusion leads to Denial of service (DoS) (CVE-2025-49796)

* libxml2: Integer Overflow in xmlBuildQName() Leads to Stack Buffer Overflow in libxml2 (CVE-2025-6021)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

This advisory covers multiple security vulnerabilities affecting Red Hat JBoss Core Services Apache HTTP Server 2.4.62 SP2 and associated Red Hat products such as OpenShift Container Platform 4.15 and Red Hat Enterprise Linux 10. Key vulnerabilities include CVE-2025-6021, an integer overflow in libxml2's xmlBuildQName() function leading to a stack buffer overflow; CVE-2025-7425, a heap use-after-free in libxslt; CVE-2025-48060, a stack buffer overflow in jq; and CVE-2025-48384 and CVE-2025-48385, arbitrary code execution and file write vulnerabilities in git. Additional issues include heap use-after-free and null pointer dereference in libxml2 causing denial of service. Red Hat has issued updated packages and container images to address these vulnerabilities. Users of affected products are advised to apply these updates promptly.

Detailed information about Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.62 SP2 security update affecting Red Hat Product Securi

Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.62 SP2 security update - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2025:14396

https://access.redhat.com/security/updates/classification/#important

2367842

2372406

2378806

2378808

2379274

Canonical URL

https://access.redhat.com/errata/RHSA-2025:10630

2372373

2372379

2372385

https://access.redhat.com/errata/RHSA-2025:19020

https://docs.redhat.com/en/documentation/red_hat_jboss_core_services/2.4.62/html/red_hat_jboss_core_services_apache_http_server_2.4.62_service_pack_2_release_notes/index

2395108

https://access.redhat.com/errata/RHSA-2025:10698

RHEL-74345

https://access.redhat.com/errata/RHSA-2025:14059

2358121

2360768

OCPBUGS-54599

https://access.redhat.com/errata/RHSA-2025:15672

2374692

https://access.redhat.com/errata/RHSA-2026:7519

https://images.redhat.com/

https://access.redhat.com/security/cve/CVE-2025-32415

https://access.redhat.com/security/updates/classification/

https://access.redhat.com/security/cve/CVE-2025-32414

https://access.redhat.com/security/cve/CVE-2025-6170

https://access.redhat.com/security/cve/CVE-2025-6021

https://access.redhat.com/security/cve/CVE-2025-49796

https://access.redhat.com/security/cve/CVE-2025-49795

https://access.redhat.com/security/cve/CVE-2025-49794

https://access.redhat.com/security/cve/CVE-2025-9714

https://access.redhat.com/security/cve/CVE-2025-26434

https://access.redhat.com/security/cve/CVE-2026-0992

https://access.redhat.com/security/cve/CVE-2026-0990

https://access.redhat.com/security/cve/CVE-2026-0989

https://access.redhat.com/security/cve/CVE-2026-1757

https://access.redhat.com/errata/RHSA-2025:15308

https://access.redhat.com/errata/RHSA-2025:10699

https://access.redhat.com/errata/RHSA-2025:11580

https://access.redhat.com/errata/RHSA-2025:12098

https://access.redhat.com/errata/RHSA-2025:12099

https://access.redhat.com/errata/RHSA-2025:12199

https://access.redhat.com/errata/RHSA-2025:12237

https://access.redhat.com/errata/RHSA-2025:12239

https://access.redhat.com/errata/RHSA-2025:12240

https://access.redhat.com/errata/RHSA-2025:12241

Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.62 SP2 security update

A NULL pointer dereference vulnerability was found in libxml2 when processing XPath XML expressions. This flaw allows an attacker to craft a malicious XML input to libxml2, leading to a denial of service.

CVE-2025-49795 is a NULL pointer dereference vulnerability in the libxml2 library used by GNOME, triggered during XPath XML expression processing. An attacker can exploit this by supplying malicious XML input, causing the library to dereference a NULL pointer and crash, resulting in a denial of service. The vulnerability has a CVSS 3.1 base score of 7.5 (high severity) with network attack vector, low attack complexity, no privileges or user interaction required, and impacts availability only. Red Hat advisories confirm the issue and provide patched libxml2 packages for Red Hat Enterprise Linux 10 and related products. The patches address this and related libxml2 vulnerabilities, mitigating the denial of service risk.

Detailed information about CVE-2025-49795: Expired Pointer Dereference in Red Hat Red Hat Enterprise Linux 10 affecting Red Hat Red Hat Enterprise Linux 10. Get

CVE-2025-49795: Expired Pointer Dereference in Red Hat Red Hat Enterprise Linux 10 - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-49795: Expired Pointer Dereference in GNOME libxml2


Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.62 SP2 security updateCVE-2025-6021 0 The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fix(es): * libxml: Heap use after free (UAF) leads to Denial of service (DoS) (CVE-2025-49794) * libxml: Type confusion leads to Denial of service (DoS) (CVE-2025-49796) * libxml2: Integer Overflow in xmlBuildQName() Leads to Stack Buffer Overflow in libxml2 (CVE-2025-6021) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. HighVulnerability#gcve #csaf #cve-2025-6021 Join the discussion	GCVE Database	07/09/2025, 12:04:08 UTC Added: 05/27/2026, 21:15:27 UTC
CVE-2025-49795: Expired Pointer Dereference in GNOME libxml2CVE-2025-49795 0 A NULL pointer dereference vulnerability was found in libxml2 when processing XPath XML expressions. This flaw allows an attacker to craft a malicious XML input to libxml2, leading to a denial of service. HighVulnerability#cve #cve-2025-49795 Join the discussion	CVE Database V5	06/16/2025, 15:19:29 UTC Added: 06/16/2025, 15:34:24 UTC

Threats Tagged 'cve-2025-49795'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-49795'

Lead Pen Test Professional