Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

A vulnerability in the Network-Based Application Recognition (NBAR) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, causing a denial of service (DoS) condition.
 This vulnerability is due to improper handling of malformed Control and Provisioning of Wireless Access Points (CAPWAP) packets. An attacker could exploit this vulnerability by sending malformed CAPWAP packets through an affected device. A successful exploit could allow the attacker to cause the device to reload unexpectedly, resulting in a DoS condition.

CVE-2025-20315 is a high-severity vulnerability affecting Cisco IOS XE Software, specifically within the Network-Based Application Recognition (NBAR) feature. The vulnerability arises from improper handling of malformed Control and Provisioning of Wireless Access Points (CAPWAP) packets. CAPWAP is a protocol used to manage wireless access points and their communication with wireless controllers, commonly deployed in enterprise and service provider networks. An unauthenticated, remote attacker can exploit this vulnerability by sending specially crafted malformed CAPWAP packets to an affected Cisco IOS XE device. This malformed input triggers a buffer access with an incorrect length value, leading to memory corruption that causes the device to reload unexpectedly. The consequence of this forced reload is a denial of service (DoS) condition, disrupting network availability and potentially causing significant operational impact. The vulnerability affects a wide range of Cisco IOS XE versions, spanning from early 3.7.x releases through multiple 16.x and 17.x releases, indicating a long-standing issue across many deployed versions. The CVSS v3.1 base score is 8.6, reflecting a high severity due to the network attack vector (no authentication or user interaction required), low attack complexity, and a direct impact on availability without affecting confidentiality or integrity. No known exploits in the wild have been reported yet, but the broad affected version range and ease of exploitation make this a critical issue for organizations relying on Cisco IOS XE devices for network infrastructure.

Detailed information about CVE-2025-20315: Buffer Access with Incorrect Length Value in Cisco Cisco IOS XE Software affecting Cisco Cisco IOS XE Software. Get r

CVE-2025-20315: Buffer Access with Incorrect Length Value in Cisco Cisco IOS XE Software - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-20315: Buffer Access with Incorrect Length Value in Cisco Cisco IOS XE Software

Threats Tagged 'cve-2025-20315'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-20315'

Lead Pen Test Professional