Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Krebs on Security

Palo Alto Unit 42

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

bigfix-remote-control

Improper management of Path-relative stylesheet import in HCL BigFix Remote Control Lite Web Portal (versions 10.1.0.0326 and lower) may allow to execute malicious code in certain web pages.

CVE-2025-55254 is an open redirect vulnerability classified under CWE-601 found in HCL Software's BigFix Remote Control Lite Web Portal, specifically in versions 10.1.0.0326 and earlier. The root cause is improper management of path-relative stylesheet imports, which can be manipulated to redirect users to untrusted external websites. This vulnerability does not require user authentication or interaction, and the attack vector is network-based. The CVSS v3.1 score is 3.7, reflecting low severity due to limited confidentiality impact and no integrity or availability compromise. The vulnerability could be exploited by attackers to craft malicious URLs that appear to originate from the legitimate BigFix portal, potentially facilitating phishing, social engineering, or delivery of malicious payloads through trusted-looking redirects. Although no known exploits are currently reported in the wild, the presence of this vulnerability in a remote control product used for endpoint management and support increases the risk profile if left unpatched. The lack of patches at the time of publication suggests the need for immediate attention from administrators. The vulnerability's exploitation could undermine user trust and potentially lead to further attacks if combined with other vulnerabilities or social engineering tactics.

Detailed information about CVE-2025-55254: CWE-601 URL Redirection to Untrusted Site ('Open Redirect') in HCL Software BigFix Remote Control affecting HCL Softw

CVE-2025-55254: CWE-601 URL Redirection to Untrusted Site ('Open Redirect') in HCL Software BigFix Remote Control - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-55254: CWE-601 URL Redirection to Untrusted Site ('Open Redirect') in HCL Software BigFix Remote Control

Threats Tagged 'cve-2025-55254'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-55254'

Lead Pen Test Professional