Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

AlienVault OTX General

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit NetSec

Reddit Cybersecurity

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

In AMD Versal Adaptive SoC devices, the lack of address validation when executing PLM runtime services through the PLM firmware can allow access to isolated or protected memory spaces, resulting in the loss of integrity and confidentiality.

CVE-2025-0037 is a medium-severity vulnerability identified in the AMD Platform Loader and Manager (PLM) firmware component used in AMD Versal Adaptive System on Chip (SoC) devices. The root cause of this vulnerability is improper input validation (CWE-20) within the PLM runtime services. Specifically, the PLM firmware fails to properly validate addresses when executing runtime service requests. This flaw allows an attacker with limited privileges (local access with low privileges) to potentially access isolated or protected memory spaces that should be inaccessible. Such unauthorized memory access can lead to the compromise of data confidentiality and integrity. The vulnerability does not require user interaction but does require local privileges, indicating that exploitation would likely occur post-compromise or through a local attack vector. The CVSS v3.1 base score is 6.6, reflecting a medium severity with the following vector: Attack Vector: Local (L), Attack Complexity: Low (L), Privileges Required: Low (L), User Interaction: None (N), Scope: Unchanged (U), Confidentiality Impact: Low (L), Integrity Impact: Low (L), Availability Impact: High (H). The high availability impact suggests that exploitation could cause denial of service or system instability. No known exploits are currently reported in the wild, and AMD has not yet published patches or mitigation details (referenced as AMD-SB-8010 for affected versions). This vulnerability is significant because the PLM firmware operates at a low level with privileged access to hardware resources, and improper validation here can undermine the security guarantees of the SoC platform. Attackers exploiting this flaw could bypass memory isolation mechanisms, potentially leading to data leakage or system disruption.

Detailed information about CVE-2025-0037: CWE-20 Improper Input Validation in AMD Platform Loader and Manager (PLM) affecting AMD Platform Loader and Manager (P

CVE-2025-0037: CWE-20 Improper Input Validation in AMD Platform Loader and Manager (PLM) - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-0037: CWE-20 Improper Input Validation in AMD Platform Loader and Manager (PLM)

Threats Tagged 'cve-2025-0037'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-0037'

Lead Pen Test Professional