Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

CIRCL OSINT Feed

ThreatFox MISP Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

cms-core

cms-redirects

Backend users with access to the redirects module and write permission on the sys_redirect table were able to read, create, and modify any redirect record without restriction to the user’s own file-mounts or web-mounts. This allowed attackers to insert or alter redirects pointing to arbitrary URLs – facilitating phishing or other malicious redirect attacks. This issue affects TYPO3 CMS versions 10.0.0-10.4.54, 11.0.0-11.5.48, 12.0.0-12.4.40, 13.0.0-13.4.22 and 14.0.0-14.0.1.

CVE-2025-59021 is a missing authorization vulnerability (CWE-862) in the TYPO3 CMS redirects module, present in versions 10.0.0 through 14.0.1. The issue arises because backend users who have access to the redirects module and write permissions on the sys_redirect database table can bypass restrictions normally enforced by file-mounts or web-mounts. This means such users can read, create, and modify any redirect record in the system, not just those associated with their own mounts. By exploiting this flaw, an attacker with legitimate backend access can insert or alter redirects to point to arbitrary external URLs. This capability can be leveraged to conduct phishing attacks by redirecting legitimate site visitors to malicious sites, or to facilitate other malicious redirect-based attacks. The vulnerability does not require user interaction beyond authenticated backend access and does not require elevated privileges beyond write access to the sys_redirect table. The CVSS 4.0 base score is 5.3 (medium), reflecting network attack vector, low complexity, no privileges required beyond write access, and no user interaction. The impact affects confidentiality and integrity by enabling unauthorized modification of redirect targets, potentially undermining user trust and site integrity. No public exploits are known at this time, but the vulnerability is published and should be addressed promptly. TYPO3 CMS is widely used in Europe for content management, especially in government, education, and enterprise sectors, making this vulnerability relevant for European organizations relying on affected versions.

Detailed information about CVE-2025-59021: CWE-862 Missing Authorization in TYPO3 TYPO3 CMS affecting TYPO3 TYPO3 CMS. Get real-time updates, technical details,

CVE-2025-59021: CWE-862 Missing Authorization in TYPO3 TYPO3 CMS - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-59021: CWE-862 Missing Authorization in TYPO3 TYPO3 CMS

Threats Tagged 'cve-2025-59021'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-59021'

Lead Pen Test Professional