Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Inclusion of Functionality from Untrusted Control Sphere vulnerability in HCL MyXalytics.v6.6
allows Loading third-party scripts without integrity checks or validation can allow external code run in the application's context, risking data exposure.

CVE-2025-52655 identifies a security weakness in HCL MyXalytics version 6.6, specifically categorized under CWE-829: Inclusion of Functionality from Untrusted Control Sphere. The vulnerability arises because the application loads third-party scripts without performing integrity checks or validating their source. This lack of validation allows potentially malicious external code to run within the application's context, which can lead to unauthorized actions or data exposure. Although the vulnerability does not directly compromise confidentiality or availability, it poses a risk of integrity loss if an attacker can trick users into triggering the execution of malicious scripts. The CVSS 3.1 score of 3.1 reflects a low severity, mainly due to the requirement for user interaction and the high complexity of exploitation. No patches or known exploits have been published yet, indicating that the vulnerability is newly disclosed and not actively exploited. The vulnerability's nature suggests that attackers would need to convince users to interact with malicious content that loads untrusted scripts, which could be leveraged in targeted phishing or social engineering campaigns. The absence of authentication requirements means that any user can be targeted, but the attack complexity and user interaction reduce the overall risk. Organizations relying on HCL MyXalytics 6.6 should monitor for updates and consider additional controls to mitigate the risk of script injection or execution from untrusted sources.

Detailed information about CVE-2025-52655: CWE-829 Inclusion of Functionality from Untrusted Control Sphere in HCL HCL MyXalytics affecting HCL HCL MyXalytics. 

CVE-2025-52655: CWE-829 Inclusion of Functionality from Untrusted Control Sphere in HCL HCL MyXalytics - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-52655: CWE-829 Inclusion of Functionality from Untrusted Control Sphere in HCL HCL MyXalytics

Threats Tagged 'cve-2025-52655'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-52655'

Lead Pen Test Professional