Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

hdf5

RPM packages are internal build artifacts and not supported on their own.
They are only supported as part of the RHEL AI application image.

Red Hat issued a security advisory (RHSA-2025:23731) for Red Hat Enterprise Linux AI 3.0 addressing multiple vulnerabilities in the HDF5 package, including CVE-2025-2310, CVE-2025-6269, and CVE-2025-6516. The advisory notes that the affected RPM packages are internal build artifacts supported only within the RHEL AI application image. The update involves rebuilding the HDF5 RPM with fixes for these CVEs. No CVSS score is provided, but the vendor classifies the severity as low. The advisory includes updated RPM packages for multiple architectures (x86_64, s390x, ppc64le, aarch64).

Detailed information about Red Hat Security Advisory: RHEL AI 3.0 hdf5 security update affecting Red Hat Product Security Red Hat. Get real-time updates, techni

Red Hat Security Advisory: RHEL AI 3.0 hdf5 security update - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2025:23731

https://access.redhat.com/security/updates/classification/#low

AIPCC-8004

Canonical URL

Red Hat Security Advisory: RHEL AI 3.0 hdf5 security update

A vulnerability has been found in HDF5 up to 1.14.6 and classified as critical. This vulnerability affects the function H5F_addr_decode_len of the file /hdf5/src/H5Fint.c. The manipulation leads to heap-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed to the public and may be used.

CVE-2025-6516 is a heap-based buffer overflow vulnerability identified in the HDF5 library versions up to 1.14.6. The flaw resides in the function H5F_addr_decode_len within the source file H5Fint.c. Specifically, improper handling of address decoding leads to a heap buffer overflow condition. This vulnerability requires local access with low privileges (PR:L) and no user interaction (UI:N) to exploit. The attack vector is local, meaning an attacker must have some level of access to the system to trigger the overflow. The vulnerability impacts confidentiality, integrity, and availability to a limited extent, as indicated by the CVSS 4.8 score (medium severity). The exploit has been publicly disclosed, increasing the risk of potential exploitation, although no known exploits are currently reported in the wild. HDF5 is a widely used data model, library, and file format for storing and managing large amounts of data, commonly employed in scientific computing, engineering, and data-intensive applications. The heap overflow could allow an attacker to execute arbitrary code, cause application crashes, or corrupt data, potentially leading to denial of service or privilege escalation if combined with other vulnerabilities. However, the requirement for local access and low privileges limits the ease of exploitation and scope of impact. No patches or mitigation links are provided yet, indicating that affected organizations should monitor for updates and consider interim protective measures.

Detailed information about CVE-2025-6516: Heap-based Buffer Overflow in HDF5 affecting null HDF5. Get real-time updates, technical details, and mitigation strat

CVE-2025-6516: Heap-based Buffer Overflow in HDF5 - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-6516: Heap-based Buffer Overflow in HDF5


Red Hat Security Advisory: RHEL AI 3.0 hdf5 security updateCVE-2025-2310 0 RPM packages are internal build artifacts and not supported on their own. They are only supported as part of the RHEL AI application image. LowVulnerability#gcve #csaf #cve-2025-2310 Join the discussion	GCVE Database	12/22/2025, 00:43:34 UTC Added: 06/28/2026, 22:13:59 UTC
CVE-2025-6516: Heap-based Buffer Overflow in HDF5CVE-2025-6516 0 A vulnerability has been found in HDF5 up to 1.14.6 and classified as critical. This vulnerability affects the function H5F_addr_decode_len of the file /hdf5/src/H5Fint.c. The manipulation leads to heap-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. MediumVulnerabilityGermanyFranceUnited Kingdom+7#cve #cve-2025-6516 Join the discussion	CVE Database V5	06/23/2025, 17:00:17 UTC Added: 06/23/2025, 17:16:51 UTC

Threats Tagged 'cve-2025-6516'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-6516'

Lead Pen Test Professional