Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Krebs on Security

Palo Alto Unit 42

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

zephyr

There is a potential OOB Write vulnerability in the gen_prov_start function in pb_adv.c. The full length of the received data is copied into the link.rx.buf receiver buffer without any validation on the data size.

CVE-2025-9558 identifies a classic buffer overflow vulnerability in the Zephyr real-time operating system, specifically within the gen_prov_start function in the pb_adv.c source file. The vulnerability occurs because the function copies the entire length of received data into the link.rx.buf buffer without validating whether the input size fits within the buffer's allocated memory. This unchecked copy operation leads to an out-of-bounds write condition, which can corrupt adjacent memory regions. Such memory corruption can cause unpredictable behavior including crashes, denial of service, or potentially arbitrary code execution if exploited skillfully. The vulnerability affects all versions of Zephyr, indicating a systemic issue in the codebase. The CVSS v3.1 score of 7.6 reflects a high severity rating, with an attack vector over the network (AV:A), low attack complexity (AC:L), no privileges required (PR:N), and no user interaction needed (UI:N). The impact scope is unchanged (S:U), with low confidentiality and integrity impact but high availability impact, meaning the primary risk is service disruption. No known exploits are currently in the wild, but the vulnerability's nature and ease of exploitation suggest it could be targeted in the future. Zephyr is widely used in embedded systems and IoT devices, which often operate in critical infrastructure and industrial environments, increasing the potential impact of this vulnerability.

Detailed information about CVE-2025-9558: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') in zephyrproject-rtos Zephyr affecting zephyrpr

CVE-2025-9558: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') in zephyrproject-rtos Zephyr - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-9558: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') in zephyrproject-rtos Zephyr

Threats Tagged 'cve-2025-9558'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-9558'

Lead Pen Test Professional