Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

revive-adserver

HackerOne community member Dao Hoang Anh (yoyomiski) has reported an improper neutralization of whitespace in the username when adding new users. A username with leading or trailing whitespace could be virtually indistinguishable from its legitimate counterpart when the username is displayed in the UI, potentially leading to confusion.

CVE-2025-55127 is a vulnerability identified in Revive Adserver version 6, reported by a HackerOne community member. The issue stems from improper neutralization of whitespace characters in usernames when adding new users. Specifically, usernames containing leading or trailing whitespace are not sanitized or normalized, allowing attackers to register usernames that visually mimic legitimate users due to the invisibility of whitespace in the UI. This can cause confusion or impersonation risks, where an attacker’s username appears identical or nearly identical to a legitimate user’s name, potentially misleading administrators or other users. The vulnerability is classified under CWE-156 (Improper Neutralization of Whitespace Characters). The CVSS v3.1 base score is 5.4 (medium severity), with an attack vector of network (remote), low attack complexity, requiring low privileges (PR:L), no user interaction, and impacting confidentiality and integrity but not availability. No known exploits are currently reported in the wild, and no patches have been linked yet. The vulnerability does not allow direct code execution or data exfiltration but can facilitate social engineering, privilege confusion, or unauthorized actions by masquerading as legitimate users. This subtlety makes detection difficult without proper username normalization or UI enhancements. Organizations using Revive Adserver should review user management workflows and consider implementing input validation and display normalization to mitigate risks.

Detailed information about CVE-2025-55127: Vulnerability in Revive Revive Adserver affecting Revive Revive Adserver. Get real-time updates, technical details, a

CVE-2025-55127: Vulnerability in Revive Revive Adserver - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-55127: Vulnerability in Revive Revive Adserver

Threats Tagged 'cve-2025-55127'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-55127'

Lead Pen Test Professional