Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

AlienVault OTX General

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit NetSec

Reddit Cybersecurity

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

controller

IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 could allow an authenticated user to cause a denial of service due to improper validation of a specified quantity size input.

CVE-2025-36015 is a vulnerability identified in IBM Controller versions 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6. The root cause is improper validation of specified quantity size inputs, categorized under CWE-1284, which deals with improper validation of input quantities. An authenticated user can exploit this flaw by submitting crafted input values that the system does not properly validate, leading to a denial of service (DoS) condition. The vulnerability affects the availability of the system but does not compromise confidentiality or integrity. The CVSS 3.1 base score is 6.5, reflecting a medium severity level, with an attack vector of network (remote), low attack complexity, requiring privileges (authenticated user), no user interaction, and unchanged scope. This means an attacker with valid credentials can remotely cause the system to become unavailable without needing further user involvement. The absence of known exploits in the wild suggests it is not yet actively targeted, but the potential impact on critical business functions remains significant. IBM Controller is widely used in financial consolidation and reporting, so disruption could affect enterprise operations. The lack of available patches at the time of publication necessitates interim mitigations to reduce risk. Monitoring input validation routines and restricting user privileges can help mitigate exploitation until official fixes are released.

Detailed information about CVE-2025-36015: CWE-1284 Improper Validation of Specified Quantity in Input in IBM Controller affecting IBM Controller. Get real-time

CVE-2025-36015: CWE-1284 Improper Validation of Specified Quantity in Input in IBM Controller - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-36015: CWE-1284 Improper Validation of Specified Quantity in Input in IBM Controller

Threats Tagged 'cve-2025-36015'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-36015'

Lead Pen Test Professional