Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

AlienVault OTX General

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit NetSec

Reddit Cybersecurity

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

The server-side backend for Adform Site Tracking before 2025-08-28 allows attackers to inject HTML or execute arbitrary code via cookie hijacking. NOTE: a customer does not need to take any action to update locally installed software (such as Adform Site Tracking 1.1).

CVE-2025-50891 is a high-severity vulnerability classified under CWE-79 (Improper Neutralization of Input During Web Page Generation, commonly known as Cross-site Scripting or XSS) affecting the server-side backend of Adform's Site Tracking product. This vulnerability allows an attacker to inject malicious HTML or execute arbitrary code by exploiting improper input sanitization in the backend system. Specifically, the vulnerability can be leveraged via cookie hijacking techniques, enabling attackers to manipulate session cookies or other stored data to inject malicious payloads. The vulnerability affects versions of the Adform server-side backend for Site Tracking prior to 2025-08-28. Notably, the CVSS 3.1 score is 7.2, indicating a high severity level, with an attack vector of network (AV:N), low attack complexity (AC:L), no privileges required (PR:N), no user interaction needed (UI:N), and a scope change (S:C). The impact affects confidentiality and integrity but not availability. The vulnerability allows attackers to steal or manipulate sensitive information and potentially execute unauthorized actions within the context of the vulnerable backend system. Although no known exploits are currently reported in the wild, the vulnerability's characteristics make it a significant risk, especially given the widespread use of Adform's tracking services in digital marketing and analytics. The note that customers do not need to update locally installed software such as Adform Site Tracking 1.1 suggests that the vulnerability resides specifically in the server-side backend infrastructure managed by Adform, rather than client-side or locally deployed components. This implies that mitigation and patching responsibilities lie primarily with the vendor, but organizations relying on Adform's services should be aware of potential risks to their data and integrations.

Detailed information about CVE-2025-50891: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2025-50891: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-50891: CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') in Adform server-side backend for Site Tracking

Threats Tagged 'cve-2025-50891'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-50891'

Lead Pen Test Professional