Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

aion

HCL AION is affected by an Autocomplete HTML Attribute Not Disabled for Password Field vulnerability. This can  allow autocomplete on password fields may lead to unintended storage or disclosure of sensitive credentials, potentially increasing the risk of unauthorized access. This issue affects AION: 2.0.

CVE-2025-52623 identifies a security weakness in HCL AION version 2.0 related to the improper handling of the HTML autocomplete attribute on password input fields. Specifically, the autocomplete attribute is not disabled, which contravenes best practices for securing password inputs. When autocomplete is enabled on password fields, browsers may store these credentials locally, potentially exposing them to unauthorized parties if the device is compromised or shared. This vulnerability is classified under CWE-522, which concerns the failure to disable autocomplete on sensitive fields. The CVSS v3.1 base score is 3.7, indicating low severity, with the vector AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:L. This means the attack requires network access, high attack complexity, low privileges, and user interaction, with an impact limited to confidentiality (partial disclosure of credentials), and no impact on integrity or availability. No patches or known exploits have been reported at the time of publication. The vulnerability primarily increases the risk of credential leakage through browser-stored passwords, which could be leveraged in targeted attacks or lateral movement within networks. Given the nature of the vulnerability, exploitation would typically require social engineering or user involvement to trigger the credential storage or disclosure.

Detailed information about CVE-2025-52623: CWE-522 in HCL AION affecting HCL AION. Get real-time updates, technical details, and mitigation strategies.

CVE-2025-52623: CWE-522 in HCL AION - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-52623: CWE-522 in HCL AION

Threats Tagged 'cve-2025-52623'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-52623'

Lead Pen Test Professional