Threat database

223 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
Not rated	–		clear · KRVTZ-NET IDS alerts for 2026-05-14 2026-05-14CIRCL OSINT Feed KRVTZ-NET IDS alerts for 2026-05-14 Unknown tlp #tlp:clear #misp:event-type="observation"#kill-chain:reconnaissance	CIRCL OSINT Feed	2026-05-14
Not rated	–		clear · KRVTZ-NET IDS alerts for 2026-05-13 2026-05-13CIRCL OSINT Feed The KRVTZ-NET IDS alerts for 2026-05-13 report network reconnaissance activity primarily involving scanning by Exabot webcrawler user agents. Some IP addresses are associated with attempts to probe known vulnerabilities, including CVE-2023-27997 targeting Fortigate VPN's /remote/logincheck endpoint and CVE-2025-55182 related to unsafe property access in React Server Components (React2Shell). There is no evidence of confirmed exploitation or active attacks in this data. The activity is informational and categorized as low severity. Unknown tlp #tlp:clear #misp:event-type="observation"#kill-chain:reconnaissance	CIRCL OSINT Feed	2026-05-13
Not rated	–		clear · KRVTZ-NET IDS alerts for 2026-05-12 2026-05-12CIRCL OSINT Feed KRVTZ-NET IDS alerts for 2026-05-12 Unknown tlp #tlp:clear #misp:event-type="observation"#kill-chain:reconnaissance	CIRCL OSINT Feed	2026-05-12
Not rated	–		clear · KRVTZ-NET IDS alerts for 2026-05-11 2026-05-11CIRCL OSINT Feed KRVTZ-NET IDS alerts for 2026-05-11 Unknown tlp #tlp:clear #misp:event-type="observation"#kill-chain:reconnaissance	CIRCL OSINT Feed	2026-05-11
Not rated	–		clear · KRVTZ-NET IDS alerts for 2026-05-10 2026-05-10CIRCL OSINT Feed KRVTZ-NET IDS alerts for 2026-05-10 Unknown tlp #tlp:clear #misp:event-type="observation"#kill-chain:reconnaissance	CIRCL OSINT Feed	2026-05-10
Not rated	–		clear · Maltrail IOC for 2026-05-10 2026-05-09CIRCL OSINT Feed Maltrail IOC for 2026-05-10 Malware tlp #tlp:clear #malware #misp:threat-level="medium-risk"	CIRCL OSINT Feed	2026-05-09
Not rated	–		clear · KRVTZ-NET IDS alerts for 2026-05-09 2026-05-09CIRCL OSINT Feed KRVTZ-NET IDS alerts for 2026-05-09 Unknown tlp #tlp:clear #misp:event-type="observation"#kill-chain:reconnaissance	CIRCL OSINT Feed	2026-05-09
Not rated	–		clear · Maltrail IOC for 2026-05-09 2026-05-08CIRCL OSINT Feed Maltrail IOC for 2026-05-09 Malware tlp #tlp:clear #malware #misp:threat-level="medium-risk"	CIRCL OSINT Feed	2026-05-08
Critical	9.2	KEVEPSS 85%	CVE-2023-27997clear · KRVTZ-NET IDS alerts for 2026-05-08 Critical9.2KEVEPSS 85%2026-05-08CIRCL OSINT FeedCVE-2023-27997 The KRVTZ-NET IDS alerts for 2026-05-08 report various network activities including reconnaissance and scanning. Several IP addresses are associated with webcrawler user agents such as Exabot and Naver, as well as test user agents. Notably, there are exploit attempts targeting Fortigate VPN devices via repeated GET requests to the /remote/logincheck endpoint, linked to CVE-2023-27997. The alert does not specify affected product versions or confirm successful exploitation. No known exploits in the wild are reported, and patch availability is not confirmed within this alert. KEVEPSS 85%Unknown tlp #tlp:clear #misp:event-type="observation"#kill-chain:reconnaissance	CIRCL OSINT Feed	2026-05-08
Not rated	–		clear · KRVTZ-NET IDS alerts for 2026-05-07 2026-05-07CIRCL OSINT Feed KRVTZ-NET IDS alerts for 2026-05-07 Unknown tlp #tlp:clear #misp:event-type="observation"#kill-chain:reconnaissance	CIRCL OSINT Feed	2026-05-07
Not rated	–		clear · Maltrail IOC for 2026-05-08 2026-05-07CIRCL OSINT Feed Maltrail IOC for 2026-05-08 Malware tlp #tlp:clear #malware #misp:threat-level="medium-risk"	CIRCL OSINT Feed	2026-05-07
Not rated	–		clear · Maltrail IOC for 2026-05-07 2026-05-06CIRCL OSINT Feed Maltrail IOC for 2026-05-07 Malware tlp #tlp:clear #malware #misp:threat-level="medium-risk"	CIRCL OSINT Feed	2026-05-06
Not rated	–		clear · Maltrail IOC for 2026-05-06 2026-05-05CIRCL OSINT Feed Maltrail IOC for 2026-05-06 Malware tlp #tlp:clear #malware #misp:threat-level="medium-risk"	CIRCL OSINT Feed	2026-05-05
Not rated	–		clear · KRVTZ-NET IDS alerts for 2026-05-05 2026-05-05CIRCL OSINT Feed The KRVTZ-NET IDS alerts for 2026-05-05 report low-severity network reconnaissance activity involving multiple IP addresses linked to scanning and exploitation attempts. The alert includes indicators related to known vulnerabilities such as CVE-2025-55182 affecting React Server Components and CVE-2023-27997 targeting Fortigate VPN. No affected product versions or active exploitation in the wild are confirmed. Patch availability is not indicated, and no vendor advisories or specific mitigation instructions are provided. The activity primarily represents reconnaissance rather than confirmed successful exploitation. Unknown tlp #tlp:clear #misp:event-type="observation"#kill-chain:reconnaissance	CIRCL OSINT Feed	2026-05-05
Not rated	–		clear · Maltrail IOC for 2026-05-05 2026-05-04CIRCL OSINT Feed This entry reports a Maltrail Indicator of Compromise (IOC) dated 2026-05-05, sourced from the CIRCL OSINT Feed. It is categorized as malware-related network activity with a medium severity rating. No specific affected versions or technical exploit details are provided. There is no patch available, and no known exploits in the wild have been identified. The information is based on open-source intelligence and manual collection methods. Malware tlp #tlp:clear #malware #misp:threat-level="medium-risk"	CIRCL OSINT Feed	2026-05-04
Not rated	–		clear · KRVTZ-NET IDS alerts for 2026-05-04 2026-05-04CIRCL OSINT Feed KRVTZ-NET IDS alerts for 2026-05-04 Unknown tlp #tlp:clear #misp:event-type="observation"#kill-chain:reconnaissance	CIRCL OSINT Feed	2026-05-04
Not rated	–		clear · Maltrail IOC for 2026-05-04 2026-05-03CIRCL OSINT Feed Maltrail IOC for 2026-05-04 Malware tlp #tlp:clear #malware #misp:threat-level="medium-risk"	CIRCL OSINT Feed	2026-05-03
Not rated	–		clear · KRVTZ-NET IDS alerts for 2026-05-03 2026-05-03CIRCL OSINT Feed KRVTZ-NET IDS alerts for 2026-05-03 Unknown tlp #tlp:clear #misp:event-type="observation"#kill-chain:reconnaissance	CIRCL OSINT Feed	2026-05-03
Not rated	–		clear · Maltrail IOC for 2026-05-03 2026-05-02CIRCL OSINT Feed Maltrail IOC for 2026-05-03 Malware tlp #tlp:clear #malware #misp:threat-level="medium-risk"	CIRCL OSINT Feed	2026-05-02
Not rated	–		clear · KRVTZ-NET IDS alerts for 2026-05-02 2026-05-02CIRCL OSINT Feed KRVTZ-NET IDS alerts for 2026-05-02 Unknown tlp #tlp:clear #misp:event-type="observation"#kill-chain:reconnaissance	CIRCL OSINT Feed	2026-05-02

Showing 21–40 of 223 results