Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

AlienVault OTX General

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit NetSec

Reddit Cybersecurity

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

mapnik

A vulnerability has been found in Mapnik up to 4.2.0. This vulnerability affects the function mapnik::detail::mod<...>::operator of the file src/value.cpp. The manipulation leads to divide by zero. The attack needs to be performed locally. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet.

CVE-2025-15564 identifies a divide-by-zero vulnerability in the Mapnik open-source mapping toolkit, specifically affecting versions 4.0 through 4.2.0. The flaw exists in the implementation of the modulo operator function (mapnik::detail::mod<...>::operator) located in the source file src/value.cpp. When certain inputs are manipulated locally, the function attempts to perform a modulo operation with zero as the divisor, causing a divide-by-zero error. This results in an unhandled exception that can crash the application or cause denial of service. The vulnerability requires local access with low privileges, does not require user interaction, and does not affect confidentiality or integrity of data. The CVSS 4.0 base score is 4.8, reflecting a medium severity due to limited attack vector and impact scope. The vulnerability was responsibly disclosed early to the Mapnik project, but no patch or official response has been issued yet. Public exploit code has been disclosed, increasing the risk of local exploitation. The vulnerability is relevant to any organization running Mapnik locally, especially in GIS, mapping, or geospatial data processing environments.

Detailed information about CVE-2025-15564: Divide By Zero in Mapnik affecting null Mapnik. Get real-time updates, technical details, and mitigation strategies.

CVE-2025-15564: Divide By Zero in Mapnik - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-15564: Divide By Zero in Mapnik

A security vulnerability has been detected in Mapnik up to 4.2.0. This issue affects the function mapnik::dbf_file::string_value of the file plugins/input/shape/dbfile.cpp. Such manipulation leads to heap-based buffer overflow. The attack must be carried out locally. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet.

CVE-2025-15537 is a heap-based buffer overflow vulnerability identified in the Mapnik open-source mapping toolkit, affecting versions 4.0 through 4.2.0. The vulnerability exists in the function mapnik::dbf_file::string_value within the source file plugins/input/shape/dbfile.cpp. This function improperly handles string data extracted from DBF files, which are commonly used in shapefile formats for geospatial data. When manipulated with crafted input, this leads to a heap-based buffer overflow, potentially corrupting memory and enabling arbitrary code execution or denial of service. The attack vector requires local access with at least limited privileges (PR:L), no user interaction, and low attack complexity. The vulnerability does not affect confidentiality, integrity, or availability on a large scale but poses a risk to systems where local users can supply malicious DBF files. The vulnerability was responsibly disclosed but remains unpatched, increasing risk. Exploitation could lead to crashes or privilege escalation if combined with other vulnerabilities. Mapnik is widely used in geospatial data rendering and mapping applications, often integrated into GIS platforms and web mapping services. The lack of a patch necessitates immediate defensive measures to mitigate risk.

Detailed information about CVE-2025-15537: Heap-based Buffer Overflow in Mapnik affecting null Mapnik. Get real-time updates, technical details, and mitigation 

CVE-2025-15537: Heap-based Buffer Overflow in Mapnik - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-15537: Heap-based Buffer Overflow in Mapnik


CVE-2025-15564: Divide By Zero in MapnikCVE-2025-15564 0 A vulnerability has been found in Mapnik up to 4.2.0. This vulnerability affects the function mapnik::detail::mod<...>::operator of the file src/value.cpp. The manipulation leads to divide by zero. The attack needs to be performed locally. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet. MediumVulnerabilityUnited StatesGermanyUnited Kingdom+7#cve #cve-2025-15564 Join the discussion	CVE Database V5	02/07/2026, 21:32:07 UTC Added: 02/07/2026, 21:45:12 UTC
CVE-2025-15537: Heap-based Buffer Overflow in MapnikCVE-2025-15537 0 A security vulnerability has been detected in Mapnik up to 4.2.0. This issue affects the function mapnik::dbf_file::string_value of the file plugins/input/shape/dbfile.cpp. Such manipulation leads to heap-based buffer overflow. The attack must be carried out locally. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet. MediumVulnerabilityUnited StatesGermanyJapan+7#cve #cve-2025-15537 Join the discussion	CVE Database V5	01/18/2026, 10:02:07 UTC Added: 01/18/2026, 10:11:45 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional