Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit NetSec

Reddit Cybersecurity

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

HCL BigFix SaaS Authentication Service is vulnerable to cache poisoning.   The BigFix SaaS's HTTP responses were observed to include the Origin header. Its presence alongside an unvalidated reflection of the Origin header value introduces a potential for cache poisoning.

CVE-2025-52621 is a medium-severity vulnerability affecting HCL Software's BigFix SaaS Remediate product versions prior to 8.1.14. The vulnerability arises from improper origin validation in the BigFix SaaS Authentication Service, specifically related to the handling of the HTTP Origin header. The service includes the Origin header in its HTTP responses and reflects the Origin header value without proper validation. This behavior introduces a cache poisoning risk, where an attacker can manipulate cached responses by injecting malicious Origin header values. Cache poisoning can lead to clients receiving incorrect or malicious content from caches, potentially enabling further attacks such as cross-site scripting (XSS), session hijacking, or unauthorized access to sensitive information. The vulnerability is classified under CWE-346, which pertains to origin validation errors. The CVSS v3.1 base score is 5.3, indicating a medium severity level. The attack vector is network-based (AV:N), requires no privileges (PR:N), no user interaction (UI:N), and impacts confidentiality to a limited extent (C:L), with no impact on integrity or availability. No known exploits are currently reported in the wild, and no patches are linked yet, suggesting that remediation may require vendor updates or configuration changes once available. The vulnerability affects the SaaS version of BigFix Remediate, a widely used endpoint management and remediation platform, which is critical for maintaining enterprise security posture by automating patch management and compliance enforcement.

Detailed information about CVE-2025-52621: CWE-346 Origin Validation Error in HCL Software BigFix SaaS Remediate affecting HCL Software BigFix SaaS Remediate. G

CVE-2025-52621: CWE-346 Origin Validation Error in HCL Software BigFix SaaS Remediate - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-52621: CWE-346 Origin Validation Error in HCL Software BigFix SaaS Remediate

Threats Tagged 'cve-2025-52621'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-52621'

Lead Pen Test Professional