Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

CVE Database V5

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

An improper resource shutdown or release vulnerability has been identified in the Click Plus C2-03CPU-2 device running firmware version 3.60. The vulnerability allows an unauthenticated attacker to perform a denial-of-service attack by exhausting all available device sessions in the Remote PLC application.

CVE-2025-57882 is a high-severity vulnerability identified in the firmware of AutomationDirect's CLICK PLUS C0-0x CPU series, specifically affecting the Click Plus C2-03CPU-2 device running firmware version 3.60. The vulnerability is classified under CWE-404, which pertains to improper resource shutdown or release. In this case, the flaw allows an unauthenticated attacker to exploit the Remote PLC application by exhausting all available device sessions. This exhaustion leads to a denial-of-service (DoS) condition, effectively rendering the device unresponsive or unable to process legitimate requests. The vulnerability does not require any authentication or user interaction, increasing its risk profile. The CVSS 4.0 base score of 8.2 reflects a high severity, with an attack vector of network (AV:N), high attack complexity (AC:H), no privileges required (PR:N), no user interaction (UI:N), and no impact on confidentiality, integrity, or availability directly, but a high impact on availability (VA:H). The lack of known exploits in the wild suggests it is a recently disclosed issue, but the potential for disruption in industrial control systems (ICS) environments is significant. The improper resource release likely stems from the firmware failing to correctly close or free session resources, allowing an attacker to open multiple sessions until the device's capacity is exhausted. This vulnerability is particularly critical in ICS contexts where uptime and reliability are paramount, as the affected devices are used for automation and control in industrial environments.

Detailed information about CVE-2025-57882: CWE-404 Improper Resource Shutdown or Release in AutomationDirect CLICK PLUS C0-0x CPU firmware affecting AutomationD

CVE-2025-57882: CWE-404 Improper Resource Shutdown or Release in AutomationDirect CLICK PLUS C0-0x CPU firmware - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-57882: CWE-404 Improper Resource Shutdown or Release in AutomationDirect CLICK PLUS C0-0x CPU firmware

Threats Tagged 'cve-2025-57882'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-57882'

Lead Pen Test Professional