Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Check Point Research

Kaspersky Security Blog

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

appwrite

CVE-2026-108770 is a server-side request forgery (SSRF) vulnerability in Appwrite versions 2.0 through 2.3.0. It affects the PublicHostname function in the Browser Screenshot Service component. This vulnerability allows remote attackers to manipulate the url argument, potentially causing the server to make unintended requests. The issue is resolved by upgrading to version 2.4.0.

This vulnerability exists in the PublicHostname function of the Browser Screenshot Service in Appwrite up to version 2.3.0. The manipulation of the url argument leads to server-side request forgery, enabling an attacker to make the server perform unauthorized requests. The vulnerability is fixed in Appwrite version 2.4.0, as indicated by the patch identified by commit 393255e7302ae5503331d45802e2eee01c6a47fe.

CVE-2026-108770 is a server-side request forgery (SSRF) vulnerability in Appwrite versions 2.0 through 2.3.0. It affects the PublicHostname function in the Browser Screenshot Service component. This vulnerability allows remote attackers to manipulate the url argument, potentially causing the server 

CVE-2026-108770: Server-Side Request Forgery in Appwrite

Appwrite <= v1.4.13 is affected by a Server-Side Request Forgery (SSRF) via the '/v1/avatars/favicon' endpoint due to an incomplete fix of CVE-2023-27159.

CVE-2024-1063 is a Server-Side Request Forgery (SSRF) vulnerability affecting Appwrite versions up to and including v1.4.13. The vulnerability exists in the '/v1/avatars/favicon' endpoint and arises due to an incomplete remediation of a previous SSRF issue identified as CVE-2023-27159. SSRF vulnerabilities allow an attacker to induce the server to make HTTP requests to arbitrary domains or internal systems that the attacker would not normally have access to. In this case, the flaw permits unauthenticated remote attackers to craft requests that the Appwrite server processes, potentially accessing internal resources or services behind firewalls. The CVSS v3.1 base score is 5.3 (medium severity), reflecting that the vulnerability can be exploited over the network without authentication or user interaction, but the impact is limited to confidentiality with no direct integrity or availability effects. The vulnerability does not appear to have known exploits in the wild as of the published date. Appwrite is an open-source backend-as-a-service platform used by developers to build web and mobile applications, providing APIs for authentication, databases, storage, and more. The presence of SSRF in a core endpoint like '/v1/avatars/favicon' could allow attackers to perform reconnaissance on internal networks, access metadata services in cloud environments, or interact with other internal services that are otherwise inaccessible externally. This could lead to information disclosure or facilitate further attacks within the victim environment. The incomplete fix from the previous CVE indicates that the underlying validation or filtering mechanisms for URLs or request destinations remain insufficient, allowing crafted requests to bypass protections. No official patch links are provided yet, so users should monitor Appwrite advisories for updates.

Detailed information about CVE-2024-1063: CWE-918 Server-Side Request Forgery (SSRF) in Appwrite Appwrite affecting Appwrite Appwrite. Get real-time updates, te

CVE-2024-1063: CWE-918 Server-Side Request Forgery (SSRF) in Appwrite Appwrite - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-1063: CWE-918 Server-Side Request Forgery (SSRF) in Appwrite Appwrite


CVE-2026-108770: Server-Side Request Forgery in AppwriteCVE-2026-108770 0 CVE-2026-108770 is a server-side request forgery (SSRF) vulnerability in Appwrite versions 2.0 through 2.3.0. It affects the PublicHostname function in the Browser Screenshot Service component. This vulnerability allows remote attackers to manipulate the url argument, potentially causing the server to make unintended requests. The issue is resolved by upgrading to version 2.4.0. MediumVulnerability#cve #cve-2026-108770 Join the discussion	CVE Database V5	10/11/2026, 22:15:24 UTC Added: 10/11/2026, 22:34:01 UTC
CVE-2024-1063: CWE-918 Server-Side Request Forgery (SSRF) in Appwrite AppwriteCVE-2024-1063 0 Appwrite <= v1.4.13 is affected by a Server-Side Request Forgery (SSRF) via the '/v1/avatars/favicon' endpoint due to an incomplete fix of CVE-2023-27159. MediumVulnerabilityGermanyFranceNetherlands+5#cve #cve-2024-1063 #cwe-918 Join the discussion	CVE Database V5	01/30/2024, 09:20:26 UTC Added: 05/29/2025, 15:14:16 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional