Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Zero Day Initiative

Cisco Talos

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

jazz-reporting-service

IBM Jazz Reporting Service could allow an authenticated user on the network to affect the system's performance using complicated queries due to insufficient resource pooling.

CVE-2025-2134 identifies a vulnerability in IBM Jazz Reporting Service versions 7.1 and 7.0.3, categorized under CWE-410 (Insufficient Resource Pooling). The vulnerability arises because the service does not adequately manage resource allocation when processing complex or computationally expensive queries submitted by authenticated users over the network. This insufficiency can lead to resource exhaustion, causing degraded system performance or denial-of-service (DoS) conditions. The attack vector requires an attacker to have valid network access and authentication credentials, but no additional user interaction is necessary. The vulnerability does not compromise confidentiality or integrity, as it does not allow data leakage or unauthorized modification, but it impacts availability by potentially overwhelming system resources. The CVSS 3.1 base score is 3.5, reflecting low severity due to the limited impact scope and required privileges. No patches or known exploits are currently available, indicating that the vulnerability is either newly discovered or not yet actively exploited. The issue primarily affects environments where IBM Jazz Reporting Service is used for generating reports, which may be critical for business intelligence and operational monitoring. Attackers could leverage this weakness to disrupt reporting services, causing operational delays or loss of visibility into system status.

Detailed information about CVE-2025-2134: CWE-410 in IBM Jazz Reporting Service affecting IBM Jazz Reporting Service. Get real-time updates, technical details, 

CVE-2025-2134: CWE-410 in IBM Jazz Reporting Service - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-2134: CWE-410 in IBM Jazz Reporting Service

IBM Jazz Reporting Service could allow an authenticated user on the host network to obtain sensitive information about other projects that reside on the server.

CVE-2025-27550 identifies a vulnerability in IBM Jazz Reporting Service versions 7.1 and 7.0.3, where an authenticated user on the host network can obtain sensitive information about other projects hosted on the same server. This vulnerability is categorized under CWE-497, which involves exposure of sensitive information to unauthorized actors. The flaw arises because the service does not adequately enforce access controls or isolate project data, allowing lateral information disclosure among authenticated users. The attack vector requires network access with valid credentials (low privilege), no user interaction, and has low attack complexity, as indicated by the CVSS vector AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N. The vulnerability impacts confidentiality only, with no direct impact on integrity or availability. No patches or known exploits are currently available, but the risk remains for insider threats or compromised accounts within the host network. The vulnerability could expose project metadata or other sensitive details that might aid further attacks or leak proprietary information. The lack of user interaction and low complexity means attackers with minimal privileges can exploit this issue if they have network access and authentication. Given the nature of IBM Jazz Reporting Service as a collaborative reporting tool often used in software development and project management environments, the exposure of project information could have operational and competitive impacts.

Detailed information about CVE-2025-27550: CWE-497 in IBM Jazz Reporting Service affecting IBM Jazz Reporting Service. Get real-time updates, technical details,

CVE-2025-27550: CWE-497 in IBM Jazz Reporting Service - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-27550: CWE-497 in IBM Jazz Reporting Service

IBM Jazz Reporting Service 7.0.2 and 7.0.3 does not invalidate session after logout which could allow an authenticated privileged user to impersonate another user on the system.

CVE-2024-25051 is a session management vulnerability classified under CWE-613 (Insufficient Session Expiration) affecting IBM Jazz Reporting Service versions 7.0.2 and 7.0.3. The flaw arises because the application fails to invalidate user sessions upon logout, leaving session tokens active and reusable. This allows an authenticated user with elevated privileges to impersonate other users by reusing these stale session tokens, potentially gaining unauthorized access to sensitive data or performing unauthorized actions. The vulnerability requires the attacker to already have privileged authenticated access, which limits exploitation scope but increases risk within trusted user groups. The CVSS 3.1 score of 6.6 reflects a medium severity with network attack vector, high complexity, high privileges required, no user interaction, and high impact on confidentiality, integrity, and availability. No public exploits have been reported yet, but the vulnerability poses a significant risk in environments where session management is critical. IBM has not yet published patches, so organizations must monitor for updates and consider interim controls. This vulnerability highlights the importance of proper session lifecycle management to prevent session fixation and hijacking attacks in enterprise applications.

Detailed information about CVE-2024-25051: CWE-613 Insufficient Session Expiration in IBM Jazz Reporting Service affecting IBM Jazz Reporting Service. Get real-


CVE-2025-2134: CWE-410 in IBM Jazz Reporting ServiceCVE-2025-2134 0 IBM Jazz Reporting Service could allow an authenticated user on the network to affect the system's performance using complicated queries due to insufficient resource pooling. LowVulnerabilityGermanyUnited KingdomFrance+4#cve #cve-2025-2134 #cwe-410 Join the discussion	CVE Database V5	02/04/2026, 21:07:26 UTC Added: 02/04/2026, 21:15:09 UTC
CVE-2025-27550: CWE-497 in IBM Jazz Reporting ServiceCVE-2025-27550 0 IBM Jazz Reporting Service could allow an authenticated user on the host network to obtain sensitive information about other projects that reside on the server. LowVulnerabilityGermanyFranceUnited Kingdom+3#cve #cve-2025-27550 #cwe-497 Join the discussion	CVE Database V5	02/04/2026, 21:07:21 UTC Added: 02/04/2026, 21:15:09 UTC
CVE-2024-25051: CWE-613 Insufficient Session Expiration in IBM Jazz Reporting ServiceCVE-2024-25051 0 IBM Jazz Reporting Service 7.0.2 and 7.0.3 does not invalidate session after logout which could allow an authenticated privileged user to impersonate another user on the system. MediumVulnerabilityUnited StatesGermanyUnited Kingdom+7#cve #cve-2024-25051 #cwe-613 Join the discussion	CVE Database V5	04/02/2025, 14:57:12 UTC Added: 02/26/2026, 19:40:40 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional