Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

devops-plan

IBM DevOps Plan 3.0.0 through 3.0.5 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials.

CVE-2025-36363 is a vulnerability identified in IBM DevOps Plan versions 3.0.0 through 3.0.5, caused by an inadequate account lockout mechanism that fails to properly restrict excessive authentication attempts. This weakness is classified under CWE-307, which pertains to improper restriction of excessive authentication attempts, enabling attackers to repeatedly try different credentials without being locked out or delayed effectively. The vulnerability allows a remote attacker to conduct brute force attacks against user accounts without requiring prior authentication or user interaction. The CVSS v3.1 base score is 5.9, reflecting a medium severity level, with the vector indicating network attack vector (AV:N), high attack complexity (AC:H), no privileges required (PR:N), no user interaction (UI:N), unchanged scope (S:U), high confidentiality impact (C:H), no integrity impact (I:N), and no availability impact (A:N). Exploitation could lead to unauthorized access to sensitive information within the IBM DevOps Plan environment, potentially exposing confidential project data or credentials. Although no exploits have been reported in the wild yet, the vulnerability poses a risk to organizations relying on IBM DevOps Plan for their software development lifecycle management. The lack of effective lockout or throttling mechanisms means attackers can automate credential guessing attempts remotely, increasing the risk of compromise. The vulnerability affects a critical enterprise tool used globally, emphasizing the need for timely mitigation.

Detailed information about CVE-2025-36363: CWE-307 Improper Restriction of Excessive Authentication Attempts in IBM DevOps Plan affecting IBM DevOps Plan. Get r

CVE-2025-36363: CWE-307 Improper Restriction of Excessive Authentication Attempts in IBM DevOps Plan - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-36363: CWE-307 Improper Restriction of Excessive Authentication Attempts in IBM DevOps Plan

IBM DevOps Plan 3.0.0 through 3.0.5 allows web page cache to be stored locally which can be read by another user on the system.

CVE-2025-36364 is a vulnerability identified in IBM DevOps Plan versions 3.0.0 through 3.0.5, categorized under CWE-525, which concerns the use of web browser cache containing sensitive information. The issue arises because the application allows sensitive data displayed on web pages to be stored in the local browser cache without adequate protection or cache-control headers. This cached data can be accessed by other users on the same physical or virtual machine, potentially exposing sensitive project or operational information. The vulnerability is exploitable without authentication or user interaction but requires local access to the system, as the attack vector is local (AV:L). The CVSS v3.1 base score is 6.2, reflecting a medium severity level primarily due to the high confidentiality impact and ease of access by local attackers. The vulnerability does not affect data integrity or availability. No patches or exploits are currently reported, but the risk remains for environments where multiple users share access to the same workstation or virtual desktop infrastructure (VDI). This issue highlights a common security oversight where web applications do not properly control caching behavior, leading to sensitive data leakage through browser caches.

Detailed information about CVE-2025-36364: CWE-525 Use of Web Browser Cache Containing Sensitive Information in IBM DevOps Plan affecting IBM DevOps Plan. Get r

CVE-2025-36364: CWE-525 Use of Web Browser Cache Containing Sensitive Information in IBM DevOps Plan - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-36364: CWE-525 Use of Web Browser Cache Containing Sensitive Information in IBM DevOps Plan


CVE-2025-36363: CWE-307 Improper Restriction of Excessive Authentication Attempts in IBM DevOps PlanCVE-2025-36363 0 IBM DevOps Plan 3.0.0 through 3.0.5 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. MediumVulnerabilityUnited StatesGermanyUnited Kingdom+9#cve #cve-2025-36363 #cwe-307 Join the discussion	CVE Database V5	03/03/2026, 19:46:11 UTC Added: 03/03/2026, 20:03:38 UTC
CVE-2025-36364: CWE-525 Use of Web Browser Cache Containing Sensitive Information in IBM DevOps PlanCVE-2025-36364 0 IBM DevOps Plan 3.0.0 through 3.0.5 allows web page cache to be stored locally which can be read by another user on the system. MediumVulnerabilityUnited StatesGermanyUnited Kingdom+7#cve #cve-2025-36364 #cwe-525 Join the discussion	CVE Database V5	03/03/2026, 19:43:12 UTC Added: 03/03/2026, 20:03:38 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional