Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Zero Day Initiative

Cisco Talos

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

A vulnerability classified as critical was found in GNU PSPP 82fb509fb2fedd33e7ac0c46ca99e108bb3bdffb. Affected by this vulnerability is the function parse_variables_option of the file utilities/pspp-convert.c. The manipulation leads to free of memory not on the heap. An attack has to be approached locally. The exploit has been disclosed to the public and may be used.

CVE-2025-5899 is a medium severity vulnerability identified in the GNU PSPP software, specifically in the parse_variables_option function within the utilities/pspp-convert.c source file. PSPP is a free software application for statistical analysis of sampled data, often used as an alternative to proprietary tools like SPSS. The vulnerability involves an incorrect memory management operation where the software attempts to free memory that was not allocated on the heap. This type of error can lead to undefined behavior, including application crashes, data corruption, or potentially exploitable conditions such as arbitrary code execution if an attacker can manipulate the memory state appropriately. The vulnerability requires local access with low privileges (PR:L) and does not require user interaction (UI:N). The attack vector is local, meaning an attacker must have some level of access to the system to exploit it. The CVSS 4.0 base score is 4.8, indicating a medium severity level, reflecting limited impact due to the local attack vector and the requirement for some privileges. No public exploits are currently known to be in the wild, but the exploit code has been disclosed publicly, increasing the risk of future exploitation. The vulnerability affects a specific commit/version of PSPP (82fb509fb2fedd33e7ac0c46ca99e108bb3bdffb), and no patches or fixes have been linked yet. Given the nature of the flaw, exploitation could lead to denial of service or potentially privilege escalation if combined with other vulnerabilities, but the direct impact on confidentiality, integrity, and availability is limited by the local attack requirement and the medium CVSS score.

Detailed information about CVE-2025-5899: Free of Memory not on the Heap in GNU PSPP affecting GNU PSPP. Get real-time updates, technical details, and mitigatio

CVE-2025-5899: Free of Memory not on the Heap in GNU PSPP - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-5899: Free of Memory not on the Heap in GNU PSPP

Threats Tagged 'cve-2025-5899'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-5899'

Lead Pen Test Professional