Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Zero Day Initiative

Cisco Talos

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit BlueTeam

Reddit ThreatIntel

Reddit Malware

Reddit Reverse Engineering

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

A broken access control (BAC) vulnerability in the web-based management interface could allow an authenticated remote attacker with low privileges to view sensitive information. Successful exploitation of this vulnerability could enable the attacker to disclose sensitive data.

CVE-2025-37160 identifies a broken access control vulnerability (CWE-200) in Hewlett Packard Enterprise's Aruba Networking AOS-CX web-based management interface. The flaw allows an authenticated remote attacker with low privileges to bypass access restrictions and view sensitive information that should be protected. The vulnerability affects multiple versions of the AOS-CX operating system, specifically versions 10.10.0000 through 10.16.0000. The CVSS v3.1 base score is 5.3 (medium), reflecting that the attack vector is network-based (AV:N), requires no user interaction (UI:N), and no privileges (PR:N), but only impacts confidentiality (C:L) without affecting integrity or availability. The vulnerability arises from improper enforcement of access controls, enabling unauthorized data disclosure via the management interface. Although no public exploits are currently known, the risk exists because the management interface is often exposed internally or via VPNs, and attackers with low-level credentials could leverage this flaw to gather sensitive configuration details or operational data. This information could facilitate further attacks or reconnaissance. The vulnerability does not allow privilege escalation or direct system disruption but compromises confidentiality, which is critical in network management contexts. The lack of available patches at the time of disclosure necessitates interim mitigations such as network segmentation, strict access control policies, and monitoring of management interface access. Given the widespread deployment of HPE Aruba networking equipment in enterprise and service provider environments, this vulnerability poses a tangible risk to organizations relying on these devices for network infrastructure management.

Detailed information about CVE-2025-37160: Vulnerability in Hewlett Packard Enterprise (HPE) HPE Aruba Networking AOS-CX affecting Hewlett Packard Enterprise (H

CVE-2025-37160: Vulnerability in Hewlett Packard Enterprise (HPE) HPE Aruba Networking AOS-CX - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-37160: Vulnerability in Hewlett Packard Enterprise (HPE) HPE Aruba Networking AOS-CX

Threats Tagged 'cve-2025-37160'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-37160'

Lead Pen Test Professional