Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

A vulnerability in the Multimedia Email component of Mitel MiContact Center Business through 10.2.0.10 and Mitel CX through 1.1.0.1 could allow an unauthenticated attacker to conduct a Cross-Site Scripting (XSS) attack due to insufficient input validation. A successful exploit requires user interaction where the email channel is enabled. This could allow an attacker to execute arbitrary scripts in the victim's browser or desktop client application.

CVE-2025-67823 is a security vulnerability identified in the Multimedia Email component of Mitel MiContact Center Business (versions through 10.2.0.10) and Mitel CX (through 1.1.0.1). The flaw arises from insufficient input validation in the email processing functionality, which enables an unauthenticated attacker to perform a Cross-Site Scripting (XSS) attack. Specifically, when the email channel is enabled, an attacker can craft malicious email content that, upon user interaction, executes arbitrary scripts within the context of the victim’s browser or the Mitel desktop client application. This execution context allows the attacker to potentially steal session cookies, perform actions on behalf of the user, or deliver further malware payloads. The vulnerability requires user interaction, such as clicking or opening a malicious email, which limits automated exploitation but still poses a significant risk in social engineering scenarios. No public exploits have been reported, and no official patches or CVSS scores are currently available, though the vulnerability has been published and reserved in the CVE database. The affected products are widely used in enterprise contact center environments, which handle sensitive customer communications and data. The lack of input sanitization in the multimedia email component is a critical oversight, as it directly impacts the confidentiality and integrity of user sessions and data. The vulnerability’s exploitation could disrupt business operations and lead to data breaches or reputational damage. Given the nature of the vulnerability, it primarily affects the confidentiality and integrity of affected systems, with availability impact being minimal unless combined with other attack vectors. The attack vector is remote and unauthenticated but requires user interaction, which somewhat reduces the risk of widespread automated exploitation. Organizations relying on Mitel’s contact center solutions should prioritize identifying affected versions and preparing for patch deployment once available. In the interim, disabling the email channel or restricting email content types may reduce exposure. Additionally, implementing Content Security Policies (CSP) and educating users about phishing risks can mitigate exploitation likelihood.

Detailed information about CVE-2025-67823: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2025-67823: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-67823: n/a

Threats Tagged 'cve-2025-67823'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-67823'

Lead Pen Test Professional