Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

AlienVault OTX General

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

CVE Database V5

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

A potential reflected cross-site scripting vulnerability has been
identified in the Poly Clariti Manager for versions prior to 10.12.1. The
website does not validate or sanitize the user input before rendering it in the
response. HP has addressed the issue in the latest software update.

CVE-2025-43484 is a reflected Cross-Site Scripting (XSS) vulnerability identified in HP Inc.'s Poly Clariti Manager software versions prior to 10.12.1. The vulnerability arises due to improper neutralization of user input during web page generation, classified under CWE-79. Specifically, the web interface of Poly Clariti Manager fails to properly validate or sanitize user-supplied input before reflecting it back in the HTTP response. This flaw allows an attacker to craft malicious URLs or input that, when processed by the vulnerable web application, results in the execution of arbitrary JavaScript code in the context of the victim's browser. The CVSS 4.0 base score is 6.0 (medium severity), with the vector indicating an attack vector of adjacent network (AV:A), low attack complexity (AC:L), no privileges required (PR:N), no user interaction (UI:N), and high impact on confidentiality (VC:H) but no impact on integrity or availability. The vulnerability does not require authentication or user interaction, increasing its risk profile. However, the attack vector being adjacent network suggests exploitation requires network proximity, such as within the same LAN or VPN. HP has addressed this vulnerability in version 10.12.1 of Poly Clariti Manager. No known exploits are currently reported in the wild. Poly Clariti Manager is a management platform used for unified communications and collaboration devices, often deployed in enterprise environments to manage voice and video endpoints. The vulnerability could be exploited by an attacker to steal session cookies, perform actions on behalf of authenticated users, or conduct phishing attacks by injecting malicious scripts. Given the nature of reflected XSS, the attacker typically needs to lure a user into clicking a crafted URL or visiting a malicious site that triggers the vulnerability.

Detailed information about CVE-2025-43484: CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') in HP Inc. Poly Cl

CVE-2025-43484: CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') in HP Inc. Poly Clariti Manager - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-43484: CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') in HP Inc. Poly Clariti Manager

Threats Tagged 'cve-2025-43484'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-43484'

Lead Pen Test Professional