Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

GCP Compute Engine Security

JVN Japan

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Cross-Site Request Forgery (CSRF) in LXD-UI in Canonical LXD versions >= 5.0 on Linux allows an attacker to create and start container instances without user consent via crafted HTML form submissions exploiting client certificate authentication.

CVE-2025-54286 is a Cross-Site Request Forgery (CSRF) vulnerability identified in Canonical's LXD container management system, specifically within the LXD-UI component in versions 5.0, 5.21, and 6.0 on Linux platforms. The vulnerability arises because the LXD-UI improperly handles client certificate authentication, allowing an attacker to craft malicious HTML forms that, when submitted by an authenticated user, can trigger the creation and startup of container instances without the user's explicit consent. This attack vector leverages the trust relationship established by client certificates, bypassing typical CSRF protections. The vulnerability requires user interaction (e.g., visiting a malicious webpage) and has a high attack complexity, meaning the attacker must carefully craft the exploit and lure the victim into performing the action. The impact includes unauthorized container deployment, which could be leveraged to run malicious code, disrupt services, or escalate privileges within the host environment. The vulnerability has a CVSS 4.0 base score of 7.5, reflecting its high severity due to the potential for significant integrity and availability impacts, despite requiring user interaction and having some attack complexity. No public exploits have been reported yet, but the vulnerability is publicly disclosed and should be addressed promptly.

Detailed information about CVE-2025-54286: CWE-352 Cross-Site Request Forgery (CSRF) in Canonical LXD affecting Canonical LXD. Get real-time updates, technical 

CVE-2025-54286: CWE-352 Cross-Site Request Forgery (CSRF) in Canonical LXD - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-54286: CWE-352 Cross-Site Request Forgery (CSRF) in Canonical LXD

Threats Tagged 'cve-2025-54286'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-54286'

Lead Pen Test Professional