Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Krebs on Security

Palo Alto Unit 42

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

HCL MyXalytics: 6.6.  is affected by Mass Assignment vulnerability. Mass Assignment occurs when user input is automatically bound to application objects without proper validation or access controls, potentially allowing unauthorized modification of sensitive fields.

CVE-2025-52656 is a high-severity vulnerability affecting HCL MyXalytics version 6.6, categorized under CWE-915 (Improperly Controlled Modification of Dynamically-Determined Object Attributes), commonly known as a Mass Assignment vulnerability. This vulnerability arises when user-supplied input is automatically bound to application objects without sufficient validation or access control checks. In this scenario, attackers can manipulate input parameters to modify sensitive object fields that should otherwise be protected, potentially leading to unauthorized changes in application state or data. The vulnerability is remotely exploitable over the network (AV:N), requires no privileges (PR:N), but does require some user interaction (UI:R). The scope is unchanged (S:U), meaning the impact is confined to the vulnerable component. The CVSS v3.1 base score is 7.6, reflecting a high severity due to the combination of ease of exploitation and the potential impact on integrity and availability. Specifically, the vulnerability allows an attacker to cause low confidentiality impact (some information disclosure or data exposure), high integrity impact (unauthorized modification of data or application behavior), and low availability impact (minor disruption). Although no known exploits are currently reported in the wild, the nature of mass assignment vulnerabilities makes them attractive targets for attackers seeking to escalate privileges or manipulate application logic. Since HCL MyXalytics is an analytics platform used for data-driven decision-making, unauthorized modifications could lead to corrupted analytics data, misleading reports, or unauthorized access to sensitive business information. The lack of available patches at the time of publication increases the urgency for organizations to implement interim mitigations and monitor for suspicious activity.

Detailed information about CVE-2025-52656: CWE-915 in HCL HCL MyXalytics affecting HCL HCL MyXalytics. Get real-time updates, technical details, and mitigation 

CVE-2025-52656: CWE-915 in HCL HCL MyXalytics - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-52656: CWE-915 in HCL HCL MyXalytics

Threats Tagged 'cve-2025-52656'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-52656'

Lead Pen Test Professional