Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

concert-software

IBM Concert Software 1.0.0 through 2.0.0 could allow a remote attacker to hijack the clicking action of the victim.

CVE-2025-36149 is a vulnerability classified under CWE-1021, which involves improper restriction of rendered UI layers or frames in IBM Concert Software versions 1.0.0 through 2.0.0. This flaw allows a remote attacker to hijack the clicking actions of a victim, effectively enabling unauthorized commands or actions to be executed without the victim's consent. The vulnerability arises because the software does not adequately restrict how UI elements are layered or framed, permitting an attacker to overlay or manipulate UI components to intercept or redirect user clicks. The CVSS 3.1 base score is 6.3 (medium), reflecting that the attack vector is network-based (AV:N), with low attack complexity (AC:L), requiring low privileges (PR:L), and no user interaction (UI:N). The impact affects confidentiality, integrity, and availability at a low level (C:L/I:L/A:L). Although no exploits are currently known in the wild and no patches have been released, the vulnerability poses a risk of unauthorized actions being performed remotely, potentially leading to data leakage or service disruption. The vulnerability is particularly concerning for environments where IBM Concert Software is used for critical workflows or sensitive data handling, as attackers could manipulate user actions to compromise system operations.

Detailed information about CVE-2025-36149: CWE-1021 Improper Restriction of Rendered UI Layers or Frames in IBM IBM Concert Software affecting IBM IBM Concert S

CVE-2025-36149: CWE-1021 Improper Restriction of Rendered UI Layers or Frames in IBM IBM Concert Software - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-36149: CWE-1021 Improper Restriction of Rendered UI Layers or Frames in IBM IBM Concert Software

IBM Concert Software 

1.0.0 through 2.0.0 could allow a local user to obtain sensitive information from buffers due to improper clearing of heap memory before release.

CVE-2025-36083 identifies a vulnerability in IBM Concert Software versions 1.0.0 through 2.0.0 related to improper clearing of heap memory before it is released back to the system. Specifically, the software fails to securely erase sensitive data stored in heap buffers prior to deallocation, which can lead to residual data remaining accessible in memory. A local attacker with access to the affected system could exploit this flaw to read leftover sensitive information from these memory buffers. The vulnerability is categorized under CWE-244, which concerns improper clearing of heap memory before release, commonly referred to as 'heap inspection.' The vulnerability does not require elevated privileges or user interaction, but the attacker must have local access to the system. The CVSS 3.1 base score is 6.2, indicating a medium severity, with the vector metrics showing local attack vector (AV:L), low attack complexity (AC:L), no privileges required (PR:N), no user interaction (UI:N), unchanged scope (S:U), and impact limited to availability (A:H) with no confidentiality or integrity impact. Although no known exploits are currently reported in the wild, the vulnerability poses a risk of sensitive data leakage through memory remnants, which could be leveraged in further attacks or data exfiltration scenarios. The lack of patches at the time of publication emphasizes the need for proactive mitigation strategies.

Detailed information about CVE-2025-36083: CWE-244 Improper Clearing of Heap Memory Before Release ('Heap Inspection') in IBM Concert Software affecting IBM Con

CVE-2025-36083: CWE-244 Improper Clearing of Heap Memory Before Release ('Heap Inspection') in IBM Concert Software - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-36083: CWE-244 Improper Clearing of Heap Memory Before Release ('Heap Inspection') in IBM Concert Software

IBM Concert Software

1.0.0 through 2.0.0 could allow a user to modify system logs due to improper neutralization of log input.

CVE-2025-36081 identifies a vulnerability in IBM Concert Software versions 1.0.0 through 2.0.0, where improper output neutralization for logs (CWE-117) allows an attacker to inject or modify log entries. This vulnerability arises because the software fails to properly sanitize or encode user-supplied input before writing it to system logs. As a result, an attacker can craft malicious input that alters log content, potentially inserting misleading or false information. This can hinder incident detection, forensic investigations, and auditing processes by corrupting the integrity of logs. The vulnerability is remotely exploitable without authentication or user interaction, as indicated by the CVSS vector (AV:N/AC:L/PR:N/UI:N). However, it does not affect confidentiality or availability, only integrity of logs. No known exploits have been reported, and no patches have been released at the time of publication. The vulnerability is classified as medium severity with a CVSS score of 5.3, reflecting moderate impact and ease of exploitation. Organizations relying on IBM Concert Software should be aware of the risk of log tampering and take proactive steps to monitor and validate logs. This vulnerability underscores the importance of proper input validation and output encoding in security-critical components like logging mechanisms.

Detailed information about CVE-2025-36081: CWE-117 Improper Output Neutralization for Logs in IBM Concert Software affecting IBM Concert Software. Get real-time


CVE-2025-36149: CWE-1021 Improper Restriction of Rendered UI Layers or Frames in IBM IBM Concert SoftwareCVE-2025-36149 0 IBM Concert Software 1.0.0 through 2.0.0 could allow a remote attacker to hijack the clicking action of the victim. MediumVulnerabilityGermanyFranceUnited Kingdom+4#cve #cve-2025-36149 #cwe-1021 Join the discussion	CVE Database V5	11/21/2025, 19:38:47 UTC Added: 11/21/2025, 19:55:44 UTC
CVE-2025-36083: CWE-244 Improper Clearing of Heap Memory Before Release ('Heap Inspection') in IBM Concert SoftwareCVE-2025-36083 0 IBM Concert Software 1.0.0 through 2.0.0 could allow a local user to obtain sensitive information from buffers due to improper clearing of heap memory before release. MediumVulnerabilityGermanyFranceUnited Kingdom+3#cve #cve-2025-36083 #cwe-244 Join the discussion	CVE Database V5	10/28/2025, 14:55:35 UTC Added: 10/28/2025, 15:01:59 UTC
CVE-2025-36081: CWE-117 Improper Output Neutralization for Logs in IBM Concert SoftwareCVE-2025-36081 0 IBM Concert Software 1.0.0 through 2.0.0 could allow a user to modify system logs due to improper neutralization of log input. MediumVulnerabilityGermanyFranceUnited Kingdom+5#cve #cve-2025-36081 #cwe-117 Join the discussion	CVE Database V5	10/28/2025, 14:53:10 UTC Added: 10/28/2025, 15:01:59 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional