Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Zero Day Initiative

Cisco Talos

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

A vulnerability was found in RT-Thread 5.1.0. It has been rated as critical. Affected by this issue is the function sys_select of the file rt-thread/components/lwp/lwp_syscall.c of the component Parameter Handler. The manipulation of the argument timeout leads to memory corruption. The vendor explains, that "[t]he timeout parameter should be checked to check if it can be accessed correctly in kernel mode and used temporarily in kernel memory."

CVE-2025-5865 is a critical memory corruption vulnerability identified in RT-Thread version 5.1.0, specifically within the sys_select function located in the lwp_syscall.c file of the Parameter Handler component. RT-Thread is a widely used real-time operating system (RTOS) designed for embedded systems and IoT devices. The vulnerability arises from improper validation of the timeout argument passed to sys_select. The timeout parameter is not adequately checked for safe access in kernel mode before being used temporarily in kernel memory. This lack of validation allows an attacker with limited privileges (low privileges, no user interaction required) to manipulate the timeout argument to cause memory corruption. The CVSS v4.0 score of 8.6 (high severity) reflects the vulnerability's potential to severely impact confidentiality, integrity, and availability, with high impact on all three security properties. The attack vector is adjacent network (AV:A), meaning exploitation requires network access within the local or adjacent network segment. The vulnerability does not require user interaction or authentication but does require low privileges, making it accessible to attackers with limited access. Memory corruption in kernel mode can lead to arbitrary code execution, privilege escalation, system crashes, or denial of service, which are critical concerns in embedded and IoT environments where RT-Thread is deployed. No known exploits are currently reported in the wild, and no patches have been linked yet, indicating that affected users should prioritize mitigation and monitoring. Given RT-Thread's role in embedded devices, this vulnerability could be exploited to compromise device operation or pivot into broader network attacks.

Detailed information about CVE-2025-5865: Memory Corruption in RT-Thread affecting n/a RT-Thread. Get real-time updates, technical details, and mitigation strat

CVE-2025-5865: Memory Corruption in RT-Thread - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-5865: Memory Corruption in RT-Thread

Threats Tagged 'cve-2025-5865'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-5865'

Lead Pen Test Professional