Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Krebs on Security

Palo Alto Unit 42

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

The libxml2 library is a development toolbox providing the implementation of various XML standards.

Bug Fix(es) and Enhancement(s):

* libxslt: Type confusion in xmlNode.psvi between stylesheet and source nodes [rhel-10.0.z] (JIRA:RHEL-102746)

* libxslt: Heap Use-After-Free in libxslt caused by atype corruption in xmlAttrPtr [rhel-10.0.z] (JIRA:RHEL-102794)

The libxml2 library, which implements various XML standards, had two vulnerabilities in its libxslt component affecting Red Hat Enterprise Linux 10. The first is a type confusion vulnerability in the xmlNode.psvi field that causes confusion between stylesheet and source nodes (JIRA:RHEL-102746). The second is a heap use-after-free vulnerability caused by corruption of the attribute pointer (xmlAttrPtr) (JIRA:RHEL-102794). These issues are tracked as CVE-2025-7424 and CVE-2025-7425 respectively and are categorized under CWE-843 (Type Confusion), CWE-416 (Use After Free), and CWE-825 (Expansion of Memory). Red Hat has released updated libxml2 and libxslt packages for Red Hat Enterprise Linux 10 and related product variants to fix these vulnerabilities. The advisory references RHBA-2025:12345 and RHSA-2026:11015 for details on the fixes and update procedures.

Detailed information about Red Hat Bug Fix Advisory: libxml2 and libxslt bug fix and enhancement update affecting Red Hat Product Security Red Hat. Get real-tim

Access of Resource Using Incompatible Type ('Type Confusion') in GNOME libxslt (CVE-2025-7424) - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHBA-2025:12345

Canonical URL

https://access.redhat.com/errata/RHSA-2026:11015

https://images.redhat.com/

https://access.redhat.com/security/cve/CVE-2025-7424

https://access.redhat.com/security/updates/classification/

https://access.redhat.com/security/cve/CVE-2025-10911

https://access.redhat.com/security/cve/CVE-2025-11731

Red Hat Bug Fix Advisory: libxml2 and libxslt bug fix and enhancement update

A flaw was found in the libxslt library. The same memory field, psvi, is used for both stylesheet and input data, which can lead to type confusion during XML transformations. This vulnerability allows an attacker to crash the application or corrupt memory. In some cases, it may lead to denial of service or unexpected behavior.

The vulnerability in libxslt arises from type confusion involving the xmlNode.psvi field, which is used interchangeably for stylesheet and source nodes. This can cause heap use-after-free or memory corruption during XML processing. The issue is tracked under CVE-2025-7424 and has been assigned a CVSS 3.1 score of 7.5 (high severity) with network attack vector, low attack complexity, no privileges required, and no user interaction needed. Red Hat's advisories (RHBA-2025:12345 and RHSA-2026:11015) confirm the existence of this flaw and provide updated libxslt packages that fix the problem.

Detailed information about CVE-2025-7424: Access of Resource Using Incompatible Type ('Type Confusion') in Red Hat Red Hat Enterprise Linux 10 affecting Red Hat

CVE-2025-7424: Access of Resource Using Incompatible Type ('Type Confusion') in Red Hat Red Hat Enterprise Linux 10 - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-7424: Access of Resource Using Incompatible Type ('Type Confusion') in GNOME libxslt


Red Hat Bug Fix Advisory: libxml2 and libxslt bug fix and enhancement updateCVE-2025-7424 0 The libxml2 library is a development toolbox providing the implementation of various XML standards. Bug Fix(es) and Enhancement(s): * libxslt: Type confusion in xmlNode.psvi between stylesheet and source nodes [rhel-10.0.z] (JIRA:RHEL-102746) * libxslt: Heap Use-After-Free in libxslt caused by atype corruption in xmlAttrPtr [rhel-10.0.z] (JIRA:RHEL-102794) HighVulnerability#gcve #csaf #cve-2025-7424 Join the discussion	GCVE Database	07/31/2025, 06:33:50 UTC Added: 06/02/2026, 21:43:35 UTC
CVE-2025-7424: Access of Resource Using Incompatible Type ('Type Confusion') in GNOME libxsltCVE-2025-7424 0 A flaw was found in the libxslt library. The same memory field, psvi, is used for both stylesheet and input data, which can lead to type confusion during XML transformations. This vulnerability allows an attacker to crash the application or corrupt memory. In some cases, it may lead to denial of service or unexpected behavior. HighVulnerability#cve #cve-2025-7424 Join the discussion	CVE Database V5	07/10/2025, 14:05:41 UTC Added: 07/10/2025, 14:16:08 UTC

Threats Tagged 'cve-2025-7424'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-7424'

Lead Pen Test Professional