Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

The ip (aka node-ip) package through 2.0.1 (in NPM) might allow SSRF because the IP address value 017700000001 is improperly categorized as globally routable via isPublic. NOTE: this issue exists because of an incomplete fix for CVE-2024-29415.

CVE-2025-59436 is a Server-Side Request Forgery (SSRF) vulnerability identified in the 'ip' package (also known as node-ip) maintained by the vendor 'fedorindutny' and distributed via NPM. This vulnerability affects versions up to 2.0.1 of the package. The root cause is an improper classification of the IP address value '017700000001' as globally routable by the isPublic function. This misclassification allows an attacker to craft requests that the server mistakenly treats as safe external requests, while in reality, they may target internal or restricted network resources. The vulnerability is a consequence of an incomplete fix for a previous SSRF issue tracked as CVE-2024-29415. SSRF vulnerabilities like this can allow attackers to induce the server to make unauthorized requests to internal systems or services that are otherwise inaccessible externally. However, the CVSS score assigned is 3.2 (low severity), reflecting limited impact and exploitation complexity. The vector indicates local attack vector (AV:L), high attack complexity (AC:H), no privileges required (PR:N), no user interaction (UI:N), and a scope change (S:C) with no confidentiality impact (C:N), low integrity impact (I:L), and no availability impact (A:N). There are no known exploits in the wild, and no patches are currently linked, suggesting that remediation may still be pending or in progress. The vulnerability's presence in a widely used NPM package means that any Node.js applications relying on this package for IP address validation or categorization could be susceptible to SSRF attacks if they do not implement additional safeguards. Given that SSRF can be leveraged to pivot into internal networks, the vulnerability could be a stepping stone for more severe attacks if chained with other vulnerabilities or misconfigurations.

Detailed information about CVE-2025-59436: CWE-918 Server-Side Request Forgery (SSRF) in fedorindutny ip affecting fedorindutny ip. Get real-time updates, techn

CVE-2025-59436: CWE-918 Server-Side Request Forgery (SSRF) in fedorindutny ip - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-59436: CWE-918 Server-Side Request Forgery (SSRF) in fedorindutny ip

Red Hat OpenShift Data Foundation is software-defined storage integrated with and optimized for the Red Hat OpenShift Data Foundation. Red Hat OpenShift Data Foundation is a highly scalable, production-grade persistent storage for stateful applications running in the Red Hat OpenShift Container Platform. In addition to persistent storage, Red Hat OpenShift Data Foundation provisions a multi-cloud data management service with an S3 compatible API.

This Red Hat security advisory covers multiple vulnerabilities fixed in RHACS 4.5 and Red Hat OpenShift Data Foundation 4.15. Key vulnerabilities include CVE-2024-11831, a Cross-site Scripting (XSS) vulnerability in the npm serialize-javascript package; CVE-2025-21613 and CVE-2025-21614, argument injection and denial of service vulnerabilities in go-git clients; CVE-2024-45337, an authorization bypass caused by misuse of ServerConfig.PublicKeyCallback in golang.org/x/crypto; and CVE-2024-45338, a non-linear parsing issue in golang.org/x/net/html. The advisory provides updated container images and software versions that address these issues. The vendor recommends upgrading to RHACS 4.5.6 and OpenShift Data Foundation 4.15.14 to apply these security fixes. No known exploits in the wild have been reported at this time.

Detailed information about Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.15.14 Bug Fix Update affecting Red Hat Product Security Red Hat. Get r

Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.15.14 Bug Fix Update - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2025:1334

https://access.redhat.com/security/updates/classification/#important

2312579

2331720

2333122

2335888

2335901

ROX-27932

Canonical URL

https://access.redhat.com/errata/RHSA-2025:8544

2270863

2290901

2292777

2295035

2311171

2319884

2322949

2324550

2348366

2354195

DFBUGS-1034

DFBUGS-2604

https://access.redhat.com/errata/RHSA-2025:1468

https://docs.openshift.com/acs/4.4/release_notes/44-release-notes.html

ROX-27933

DFBUGS-2605

https://access.redhat.com/security/cve/CVE-2024-47866

https://access.redhat.com/security/updates/classification/

https://docs.redhat.com/en/documentation/red_hat_ceph_storage/

2337893

2337926

2337927

https://docs.redhat.com/en/documentation/red_hat_openshift_pipelines

https://access.redhat.com/security/cve/cve-2024-21536

https://access.redhat.com/security/cve/cve-2024-11831

https://access.redhat.com/security/cve/cve-2024-48949

https://access.redhat.com/security/cve/CVE-2025-59436

2274457

2336611

2355073

2357806

2362830

2386873

2387009

2390042

2390980

2393479

2394489

2397257

2400637

2404655

2404669

2405301

Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.15.14 Bug Fix Update


CVE-2025-59436: CWE-918 Server-Side Request Forgery (SSRF) in fedorindutny ipCVE-2025-59436 0 The ip (aka node-ip) package through 2.0.1 (in NPM) might allow SSRF because the IP address value 017700000001 is improperly categorized as globally routable via isPublic. NOTE: this issue exists because of an incomplete fix for CVE-2024-29415. LowVulnerabilityGermanyFranceUnited Kingdom+4#cve #cve-2025-59436 #cwe-918 Join the discussion	CVE Database V5	09/16/2025, 00:00:00 UTC Added: 09/16/2025, 02:16:14 UTC
Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.15.14 Bug Fix UpdateCVE-2024-11831 0 Red Hat OpenShift Data Foundation is software-defined storage integrated with and optimized for the Red Hat OpenShift Data Foundation. Red Hat OpenShift Data Foundation is a highly scalable, production-grade persistent storage for stateful applications running in the Red Hat OpenShift Container Platform. In addition to persistent storage, Red Hat OpenShift Data Foundation provisions a multi-cloud data management service with an S3 compatible API. HighVulnerability#gcve #csaf #cve-2024-11831 Join the discussion	GCVE Database	06/04/2025, 20:11:19 UTC Added: 05/26/2026, 20:58:32 UTC

Threats Tagged 'cve-2025-59436'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-59436'

Lead Pen Test Professional