Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

An improper permission handling vulnerability was reported in Lenovo PC Manager that could allow a local attacker to perform arbitrary file deletions as an elevated user.

CVE-2025-2503 is a vulnerability identified in Lenovo PC Manager, a utility software designed to manage and optimize Lenovo PCs. The vulnerability is categorized under CWE-732, which pertains to incorrect permission assignment for critical resources. Specifically, this flaw allows a local attacker with limited privileges (low-level privileges) to perform arbitrary file deletions with elevated user rights. This means that the attacker can delete files that should normally be protected, potentially including system files or files critical to the operation of the PC or other applications. The vulnerability does not require user interaction and does not involve network access, as indicated by the CVSS vector (AV:L - local access). The attack complexity is low (AC:L), and no authentication beyond low privileges is required (PR:L). The impact on confidentiality is none, but the integrity and availability impacts are high, as critical files can be deleted, potentially leading to system instability or denial of service. The vulnerability is not known to be exploited in the wild as of the publication date (May 30, 2025), and no patches have been linked yet. The affected versions are not explicitly detailed beyond a placeholder '0', suggesting that the vulnerability may affect current or recent versions of Lenovo PC Manager. The vulnerability is medium severity with a CVSS 4.0 score of 6.9, reflecting significant risk but limited by the requirement for local access and low privileges.

Detailed information about CVE-2025-2503: CWE-280: Improper Handling of Insufficient Permissions or Privileges in Lenovo PC Manager affecting Lenovo PC Manager.

CVE-2025-2503: CWE-280: Improper Handling of Insufficient Permissions or Privileges in Lenovo PC Manager - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-2503: CWE-732: Incorrect Permission Assignment for Critical Resource in Lenovo PC Manager

Threats Tagged 'cve-2025-2503'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-2503'

Lead Pen Test Professional