Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

HCL Unica Centralized Offer Management is vulnerable to a potential Server-Side Request Forgery (SSRF). An attacker can exploit improper input validation by submitting maliciously crafted input to a target application running on a server.

CVE-2025-31993 is a Server-Side Request Forgery (SSRF) vulnerability classified under CWE-918, found in HCL Software's Unica Centralized Offer Management product, specifically versions up to 25.1. SSRF vulnerabilities occur when an attacker can manipulate a server-side application to send crafted requests to unintended locations, potentially accessing internal systems or services that are otherwise inaccessible externally. In this case, the vulnerability stems from insufficient input validation, allowing an attacker with high privileges and requiring user interaction to submit malicious input that the server processes. The CVSS 3.1 base score is 3.5, indicating a low severity level, with the vector showing network attack vector (AV:N), low attack complexity (AC:L), but requiring privileges (PR:H) and user interaction (UI:R). The impact is limited to confidentiality (C:L) and availability (A:L), with no integrity impact. No known exploits are currently reported in the wild, and no official patches have been published yet. The vulnerability could allow attackers to make the server perform unauthorized requests, potentially exposing internal resources or causing denial of service conditions. However, exploitation complexity and required privileges reduce the immediate risk. Organizations using Unica Centralized Offer Management should assess their exposure, especially if the application interfaces with sensitive internal networks or services.

Detailed information about CVE-2025-31993: CWE-918 Server-Side Request Forgery (SSRF) in HCL Software Unica Centralized Offer Management affecting HCL Software 

CVE-2025-31993: CWE-918 Server-Side Request Forgery (SSRF) in HCL Software Unica Centralized Offer Management - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-31993: CWE-918 Server-Side Request Forgery (SSRF) in HCL Software Unica Centralized Offer Management

Threats Tagged 'cve-2025-31993'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-31993'

Lead Pen Test Professional