Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

AlienVault OTX General

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit NetSec

Reddit Cybersecurity

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Movable Type contains an issue with use of less trusted source. If exploited, tampered email to reset a password may be sent by a remote unauthenticated attacker.

CVE-2025-53522 is a medium-severity vulnerability affecting Six Apart Ltd.'s Movable Type (Software Edition) versions 8.0.0 to 8.0.6 and 8.4.0 to 8.4.2. The issue arises from the use of a less trusted source when handling password reset emails. Specifically, a remote unauthenticated attacker can exploit this flaw to send tampered password reset emails. This implies that the system does not sufficiently validate or authenticate the source of the password reset request or the content of the reset email, allowing an attacker to potentially manipulate the email content or trigger unauthorized password reset communications. The vulnerability has a CVSS v3.0 base score of 5.3, indicating a medium severity level. The vector string CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N shows that the attack can be performed remotely over the network without any privileges or user interaction, and it impacts the integrity of the system but not confidentiality or availability. Although no known exploits are currently reported in the wild, the vulnerability could be leveraged to conduct phishing or social engineering attacks by sending malicious password reset emails, potentially leading to user confusion or unauthorized account access if combined with other weaknesses. The affected versions are within the 8.0 and 8.4 series of Movable Type, which is a content management system used primarily for blogging and website publishing. The root cause appears to be insufficient validation of the source or content of password reset emails, which is a critical step in secure password recovery workflows.

Detailed information about CVE-2025-53522: Use of less trusted source in Six Apart Ltd. Movable Type (Software Edition) affecting Six Apart Ltd. Movable Type (S

CVE-2025-53522: Use of less trusted source in Six Apart Ltd. Movable Type (Software Edition) - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-53522: Use of less trusted source in Six Apart Ltd. Movable Type (Software Edition)

Threats Tagged 'cve-2025-53522'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-53522'

Lead Pen Test Professional