Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit NetSec

Reddit Cybersecurity

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Improper permission control vulnerability in the OXARI ServiceDesk application could allow an attacker using a guest access or an unprivileged account to gain additional administrative permissions in the application.This issue affects OXARI ServiceDesk in versions before 2.0.324.0.

CVE-2025-1542 is a critical security vulnerability identified in the OXARI ServiceDesk application developed by Infonet Projekt SA. This vulnerability is classified under CWE-425, which pertains to Direct Request or Forced Browsing attacks. The core issue arises from improper permission control within the application, allowing an attacker with guest or unprivileged access to escalate their privileges and gain administrative permissions without authentication or user interaction. The vulnerability affects all versions of OXARI ServiceDesk prior to 2.0.324.0. The CVSS 4.0 base score is 9.3, indicating a critical severity level. The vector string (CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N) highlights that the attack can be executed remotely over the network without any privileges or user interaction, and it results in high confidentiality and integrity impacts, with a low availability impact. The vulnerability does not require authentication, making exploitation easier and more dangerous. Although no known exploits are currently reported in the wild, the nature of the flaw and the critical severity score suggest that exploitation could lead to unauthorized administrative control over the ServiceDesk application, potentially allowing attackers to manipulate service requests, access sensitive data, or disrupt IT service management processes. The lack of patch links indicates that a fix may not yet be publicly available, emphasizing the urgency for affected organizations to implement mitigations or monitor for updates.

Detailed information about CVE-2025-1542: CWE-425 Direct Request ('Forced Browsing') in Infonet Projekt SA OXARI ServiceDesk affecting Infonet Projekt SA OXARI 

CVE-2025-1542: CWE-425 Direct Request ('Forced Browsing') in Infonet Projekt SA OXARI ServiceDesk - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-1542: CWE-425 Direct Request ('Forced Browsing') in Infonet Projekt SA OXARI ServiceDesk

Threats Tagged 'cve-2025-1542'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-1542'

Lead Pen Test Professional