Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

GreenCMS

A vulnerability was found in GreenCMS up to 2.3. This affects an unknown part of the file /DataController.class.php of the component File Handler. Performing a manipulation of the argument sqlFiles/zipFiles results in path traversal. The attack can be initiated remotely. The exploit has been made public and could be used. This vulnerability only affects products that are no longer supported by the maintainer.

CVE-2025-15187 is a path traversal vulnerability identified in GreenCMS versions 2.0 through 2.3, located in the /DataController.class.php file within the File Handler component. The vulnerability arises from improper validation of the sqlFiles/zipFiles argument, which can be manipulated by an attacker to traverse directories and access files outside the intended directory scope. This flaw can be exploited remotely but requires the attacker to have high-level privileges (authenticated with elevated rights) on the system, reducing the attack surface. The vulnerability does not require user interaction and does not affect confidentiality or integrity to a high degree but can lead to limited information disclosure or unauthorized file access. GreenCMS is no longer maintained, and no official patches or fixes have been released, increasing the risk for organizations that continue to use these versions. The CVSS 4.0 base score is 5.1 (medium), reflecting the moderate impact and exploitation complexity. Although no active exploitation has been reported, public exploit code is available, which could facilitate attacks by skilled adversaries. The vulnerability affects only the GreenCMS product, which is a content management system with a limited user base compared to mainstream CMS platforms. The lack of vendor support means organizations must rely on custom mitigations or migration to secure their environments.

Detailed information about CVE-2025-15187: Path Traversal in GreenCMS affecting null GreenCMS. Get real-time updates, technical details, and mitigation strategi

CVE-2025-15187: Path Traversal in GreenCMS - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-15187: Path Traversal in GreenCMS

Threats Tagged 'cve-2025-15187'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-15187'

Lead Pen Test Professional