Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

AlienVault OTX General

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

CVE Database V5

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

On affected platforms running Arista EOS, maliciously formed UDP packets with source port 3503 may be accepted by EOS. UDP Port 3503 is associated with LspPing Echo Reply. This can result in unexpected behaviors, especially for UDP based services that do not perform some form of authentication.

CVE-2025-6188 is a high-severity vulnerability affecting multiple versions of Arista Networks EOS (Extensible Operating System), specifically versions 4.30.0 through 4.33.1.0. The vulnerability arises from the improper handling of maliciously crafted UDP packets with a source port of 3503, which is associated with the LspPing Echo Reply service. LspPing is typically used for network diagnostics in MPLS (Multiprotocol Label Switching) environments. The flaw allows these specially formed UDP packets to be accepted by the EOS without proper authentication or validation, leading to unexpected behaviors. This vulnerability is categorized under CWE-290, indicating an authentication bypass or insufficient authentication mechanism. The CVSS v3.1 base score is 7.5, reflecting a high severity level, with an attack vector of network (AV:N), low attack complexity (AC:L), no privileges required (PR:N), and no user interaction (UI:N). The impact primarily affects the integrity of the system, as the vulnerability can be exploited to manipulate or disrupt UDP-based services relying on LspPing Echo Reply, potentially allowing attackers to interfere with network operations or cause service disruptions. No known exploits are currently reported in the wild, and no patches have been linked yet, indicating that organizations should be vigilant and prepare to apply updates once available. The vulnerability affects network infrastructure devices running Arista EOS, which are commonly deployed in data centers, enterprise networks, and service provider environments for high-performance switching and routing.

Detailed information about CVE-2025-6188: 288 in Arista Networks EOS affecting Arista Networks EOS. Get real-time updates, technical details, and mitigation str

CVE-2025-6188: 288 in Arista Networks EOS - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-6188: 288 in Arista Networks EOS

Threats Tagged 'cve-2025-6188'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-6188'

Lead Pen Test Professional