Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Zero Day Initiative

Cisco Talos

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

HCL DevOps Deploy / HCL Launch is susceptible to a race condition in http-session client-IP binding enforcement which may allow a session to be briefly reused from a new IP address before it is invalidated. This could lead to unauthorized access under certain network conditions.

CVE-2025-62329 identifies a vulnerability in HCL Software's DevOps Deploy and Launch products, specifically versions 7.3 through 8.1.2.3. The issue arises from a race condition in the enforcement of HTTP session client-IP binding, a security mechanism designed to restrict session reuse to the original client IP address. Due to insufficient session expiration handling, there exists a brief time window during which a session can be reused from a new IP address before the session is invalidated. This flaw is categorized under CWE-613 (Insufficient Session Expiration), indicating that session tokens remain valid longer than intended under certain conditions. Exploiting this vulnerability requires network conditions that allow an attacker to race the session invalidation process, and the attacker must have at least low-level privileges (PR:L) but does not require user interaction (UI:N). The vulnerability affects confidentiality, integrity, and availability but only to a limited degree, as the attacker can gain unauthorized access temporarily. The CVSS v3.1 vector (AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L) reflects that the attack is network-based, requires high attack complexity, low privileges, no user interaction, and impacts all three security properties at a low level. No known exploits have been reported in the wild as of the publication date. The vulnerability is particularly relevant to organizations relying on HCL DevOps Deploy and Launch for software deployment and automation, where unauthorized session reuse could lead to unauthorized access to deployment pipelines or sensitive operational controls.

Detailed information about CVE-2025-62329: CWE-613 Insufficient Session Expiration in HCL Software DevOps Deploy / Launch affecting HCL Software DevOps Deploy /

CVE-2025-62329: CWE-613 Insufficient Session Expiration in HCL Software DevOps Deploy / Launch - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-62329: CWE-613 Insufficient Session Expiration in HCL Software DevOps Deploy / Launch

Threats Tagged 'cve-2025-62329'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-62329'

Lead Pen Test Professional