Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

GCP Compute Engine Security

JVN Japan

AWS Security Bulletins

GCP Kubernetes Security

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

AlienVault OTX General

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Malware

Reddit Reverse Engineering

Reddit NetSec

Reddit Cybersecurity

ThreatFox MISP Feed

CIRCL OSINT Feed

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

FRRouting/frr from v2.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the opaque_info_detail function at ospf_opaque.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted LS Update packet.

CVE-2025-61099 is a vulnerability identified in the FRRouting (FRR) software suite, specifically affecting versions from 2.0 through 10.4.1. The flaw resides in the ospf_opaque.c source file within the opaque_info_detail function, where a NULL pointer dereference can occur when processing OSPF Link State Update (LS Update) packets. This vulnerability is triggered by sending a crafted LS Update packet that causes the routing daemon to dereference a NULL pointer, leading to a crash and thus a Denial of Service (DoS). The vulnerability does not require any privileges, authentication, or user interaction, making it remotely exploitable by an unauthenticated attacker with network access to the vulnerable FRR instance. The CVSS v3.1 base score of 7.5 reflects a high severity due to the network attack vector, low attack complexity, and the impact on availability without affecting confidentiality or integrity. FRR is widely used in routing infrastructure for OSPF protocol implementations in ISPs, data centers, and enterprise networks. The DoS condition can disrupt network routing, causing outages or degraded performance. No public exploits have been reported yet, but the vulnerability's nature suggests it could be weaponized. The absence of a patch link indicates that a fix may still be pending or in development. The underlying issue is classified under CWE-476 (NULL Pointer Dereference), a common programming error leading to crashes. Organizations using FRR should be aware of this vulnerability and prepare to apply patches once released.

Detailed information about CVE-2025-61099: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2025-61099: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-61099: n/a

Threats Tagged 'cve-2025-61099'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-61099'

Lead Pen Test Professional