Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit NetSec

Reddit Cybersecurity

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

SolarWinds Web Help Desk was found to be susceptible to an untrusted data deserialization vulnerability that could lead to remote code execution, which would allow an attacker to run commands on the host machine. This could be exploited without authentication.

CVE-2025-40553 is a critical security vulnerability classified under CWE-502 (Deserialization of Untrusted Data) affecting SolarWinds Web Help Desk versions 12.8.8 HF1 and earlier. The vulnerability arises from the application improperly handling serialized data inputs, allowing an attacker to supply maliciously crafted serialized objects. When the application deserializes this untrusted data without adequate validation or sandboxing, it can lead to arbitrary code execution on the host system. Notably, this vulnerability can be exploited remotely over the network without any authentication or user interaction, significantly increasing its risk profile. The CVSS v3.1 base score of 9.8 reflects the ease of exploitation (network attack vector, no privileges or user interaction required) and the severe impact on confidentiality, integrity, and availability. Successful exploitation could allow attackers to execute arbitrary commands, potentially leading to full system compromise, data theft, or disruption of services. Although no public exploits are currently reported, the critical nature of this flaw demands urgent mitigation. The vulnerability highlights a common security pitfall in deserialization processes where untrusted inputs are not properly sanitized or restricted, enabling attackers to leverage crafted payloads to execute malicious code within the application context.

Detailed information about CVE-2025-40553: CWE-502 Deserialization of Untrusted Data in SolarWinds Web Help Desk affecting SolarWinds Web Help Desk. Get real-ti

CVE-2025-40553: CWE-502 Deserialization of Untrusted Data in SolarWinds Web Help Desk - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-40553: CWE-502 Deserialization of Untrusted Data in SolarWinds Web Help Desk

Threats Tagged 'cve-2025-40553'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-40553'

Lead Pen Test Professional