Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

UI synchronization issue in the Just-in-Time (JIT) access request approval interface in Devolutions Server 2025.2.4.0 and earlier allows a remote authenticated attacker to gain unauthorized access to deleted JIT Groups via stale UI state during standard checkout request processing.

CVE-2025-8353 is a security vulnerability affecting Devolutions Server versions 2025.2.4.0 and earlier. The issue stems from a UI synchronization flaw in the Just-in-Time (JIT) access request approval interface. Specifically, the vulnerability is categorized under CWE-446, which relates to UI discrepancies for security features. In this case, the UI does not properly synchronize its state with backend changes, allowing a remote authenticated attacker to exploit stale UI data. This stale UI state can cause the system to process access requests referencing deleted JIT Groups, thereby granting unauthorized access to resources that should no longer be accessible. The attack requires the attacker to be authenticated, but no user interaction beyond standard request processing is necessary. The vulnerability arises because the interface fails to update or invalidate UI elements after JIT Groups are deleted, leading to a mismatch between the UI and the actual system state. This discrepancy can be leveraged to bypass intended access controls, undermining the security model of the JIT access feature, which is designed to provide time-limited, controlled access to sensitive resources. No public exploits are currently known, and no patch links have been provided yet. The vulnerability was published on July 30, 2025, and remains unpatched as of this analysis.

Detailed information about CVE-2025-8353: CWE-446: UI Discrepancy for Security Feature in Devolutions Server affecting Devolutions Server. Get real-time updates

CVE-2025-8353: CWE-446: UI Discrepancy for Security Feature in Devolutions Server - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-8353: CWE-446: UI Discrepancy for Security Feature in Devolutions Server

A UI Discrepancy for Security Feature

vulnerability in the UI of Juniper Networks Junos OS on VM Host systems allows a network-based, unauthenticated attacker to access the device.



On VM Host Routing Engines (RE), even if the configured public key for root has been removed, remote users which are in possession of the corresponding private key can still log in as root.
This issue affects Junos OS:



  *  all versions before 22.2R3-S7,
  *  22.4 versions before 22.4R3-S5,
  *  23.2 versions before 23.2R2-S3,
  *  23.4 versions before 23.4R2-S3,
  *  24.2 versions before 24.2R1-S2, 24.2R2.

CVE-2025-52983 is a vulnerability classified under CWE-446 (UI Discrepancy for Security Feature) affecting Juniper Networks Junos OS on VM Host Routing Engines. The core issue arises from a discrepancy in the user interface that fails to properly enforce the removal of a configured root public key. Specifically, even after the public key has been removed from the system configuration, remote users who possess the corresponding private key can still authenticate as root. This effectively bypasses intended access controls and allows unauthorized root-level access over the network without requiring user interaction or additional authentication factors. The affected Junos OS versions include all releases before 22.2R3-S7, 22.4 versions before 22.4R3-S5, 23.2 versions before 23.2R2-S3, 23.4 versions before 23.4R2-S3, and 24.2 versions before 24.2R1-S2 and 24.2R2. The vulnerability has a CVSS v3.1 base score of 7.2, indicating high severity, with attack vector network (AV:N), low attack complexity (AC:L), requiring high privileges (PR:H), no user interaction (UI:N), unchanged scope (S:U), and high impact on confidentiality, integrity, and availability (C:H/I:H/A:H). Although no known exploits have been reported in the wild, the flaw poses a significant risk due to the potential for full root compromise on critical network infrastructure devices. The vulnerability stems from a UI inconsistency that misrepresents the actual security state, misleading administrators and allowing unauthorized access. This can lead to full system compromise, data breaches, and disruption of network services.

Detailed information about CVE-2025-52983: CWE-446 UI Discrepancy for Security Feature in Juniper Networks Junos OS affecting Juniper Networks Junos OS. Get rea

CVE-2025-52983: CWE-446 UI Discrepancy for Security Feature in Juniper Networks Junos OS - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-52983: CWE-446 UI Discrepancy for Security Feature in Juniper Networks Junos OS


CVE-2025-8353: CWE-446: UI Discrepancy for Security Feature in Devolutions ServerCVE-2025-8353 0 UI synchronization issue in the Just-in-Time (JIT) access request approval interface in Devolutions Server 2025.2.4.0 and earlier allows a remote authenticated attacker to gain unauthorized access to deleted JIT Groups via stale UI state during standard checkout request processing. MediumVulnerabilityGermanyFranceUnited Kingdom+3#cve #cve-2025-8353 #cwe-446 Join the discussion	CVE Database V5	07/30/2025, 16:06:46 UTC Added: 07/30/2025, 16:18:05 UTC
CVE-2025-52983: CWE-446 UI Discrepancy for Security Feature in Juniper Networks Junos OSCVE-2025-52983 0 A UI Discrepancy for Security Feature vulnerability in the UI of Juniper Networks Junos OS on VM Host systems allows a network-based, unauthenticated attacker to access the device. On VM Host Routing Engines (RE), even if the configured public key for root has been removed, remote users which are in possession of the corresponding private key can still log in as root. This issue affects Junos OS: * all versions before 22.2R3-S7, * 22.4 versions before 22.4R3-S5, * 23.2 versions before 23.2R2-S3, * 23.4 versions before 23.4R2-S3, * 24.2 versions before 24.2R1-S2, 24.2R2. HighVulnerabilityUnited StatesCanadaUnited Kingdom+10#cve #cve-2025-52983 #cwe-446 Join the discussion	CVE Database V5	07/11/2025, 15:09:18 UTC Added: 07/11/2025, 15:31:07 UTC

Threats Tagged 'cwe-446'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cwe-446'

Lead Pen Test Professional