Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

AlienVault OTX General

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

CVE Database V5

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

wolfssh

A heap buffer over-read vulnerability exists in the wolfSSH_CleanPath() function in wolfSSH. An authenticated remote attacker can trigger the issue via crafted SCP path input containing '/./' sequences, resulting in a heap over read by 1 byte.

CVE-2025-15382 is a heap buffer over-read vulnerability classified under CWE-125, found in the wolfSSH library, specifically in the wolfSSH_CleanPath() function. This function is responsible for sanitizing SCP (Secure Copy Protocol) path inputs. The vulnerability arises when the function processes crafted SCP path strings containing '/./' sequences, which are used to represent the current directory. Due to improper bounds checking, this crafted input causes the function to read one byte beyond the allocated heap buffer. The over-read is subtle but can lead to the disclosure of adjacent memory contents, potentially leaking sensitive information or causing application crashes. Exploitation requires an attacker to be authenticated with low privileges and to interact with the system by submitting malicious SCP paths. The CVSS 4.0 score of 5.1 reflects the medium severity, considering the network attack vector, low attack complexity, and the need for some user interaction. The affected version is wolfSSH 1.4.12, a widely used SSH library in embedded systems and IoT devices. No patches or exploits are currently known, but the vulnerability could be leveraged in targeted attacks to gain intelligence or disrupt services. The flaw does not affect confidentiality, integrity, or availability at a high level but poses a risk of minor information leakage or instability.

Detailed information about CVE-2025-15382: CWE-125: Out-of-bounds Read in wolfSSL wolfSSH affecting wolfSSL wolfSSH. Get real-time updates, technical details, a

CVE-2025-15382: CWE-125: Out-of-bounds Read in wolfSSL wolfSSH - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-15382: CWE-125: Out-of-bounds Read in wolfSSL wolfSSH

Threats Tagged 'cve-2025-15382'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-15382'

Lead Pen Test Professional