Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

GCP Compute Engine Security

JVN Japan

AWS Security Bulletins

GCP Kubernetes Security

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

command-block-ide

In Minecraft mod "Command Block IDE" up to and including version 0.4.9, a missing authorization (CWE-862) allows any user to modify "function" files used by the game when installed on a dedicated server.

CVE-2024-48645 is a vulnerability identified in the Minecraft mod "Command Block IDE" versions up to and including 0.4.9. The flaw stems from a missing authorization control (classified under CWE-862), which means that the mod does not properly verify whether a user has permission to modify certain critical game files known as "function" files. These files are used by Minecraft to execute sequences of commands that can alter game behavior and mechanics. The vulnerability is exploitable remotely without requiring authentication or user interaction, as any user connected to a dedicated server running this mod can modify these function files. This lack of access control can lead to unauthorized changes in game logic, potentially allowing attackers to disrupt gameplay, introduce malicious commands, or manipulate the server environment. The CVSS 3.1 score of 7.5 (High) reflects the vulnerability's low attack complexity, network attack vector, no privileges required, no user interaction, and a significant impact on integrity, though confidentiality and availability are not affected. No patches or fixes have been released at the time of publication, and no active exploitation has been reported. The vulnerability is particularly relevant for dedicated Minecraft servers using this mod, which are often used in multiplayer gaming communities and educational environments.

Detailed information about CVE-2024-48645: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-48645: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-48645: n/a

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional