Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

HC-Mailinspector

An issue in HSC Cybersecurity HC Mailinspector 5.2.17-3 through 5.2.18 allows a regular user account to escalate their privileges and gain administrative access by changing the type parameter from 1 to 0.

CVE-2024-32371 is a vulnerability identified in HSC Cybersecurity's HC Mailinspector software versions 5.2.17-3 through 5.2.18. The issue arises from insufficient input validation of the 'type' parameter, which a regular user can manipulate from the value 1 to 0. This manipulation leads to privilege escalation, granting the attacker administrative access within the system. The vulnerability is classified under CWE-20, indicating improper input validation as the root cause. The exploit requires no prior authentication or user interaction and can be executed remotely over the network, increasing the attack surface. The CVSS v3.1 base score of 7.5 reflects a high severity rating, primarily due to the high impact on confidentiality and the low attack complexity. Although integrity and availability impacts are not noted, the ability to gain administrative privileges can indirectly lead to further compromise. No patches or mitigations have been officially released at the time of publication, and no known exploits are reported in the wild. The vulnerability affects organizations relying on HC Mailinspector for email security, potentially exposing sensitive communications and administrative controls to unauthorized users.

Detailed information about CVE-2024-32371: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-32371: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-32371: n/a

An issue in HSC Cybersecurity HC Mailinspector 5.2.17-3 through 5.2.18 allows a remote attacker to obtain sensitive information via a crafted payload to the id parameter in the mliSystemUsers.php component.

CVE-2024-32370 is a critical vulnerability affecting HSC Cybersecurity HC Mailinspector versions 5.2.17-3 through 5.2.18. The flaw exists in the mliSystemUsers.php component, specifically in the handling of the id parameter. An attacker can craft a malicious payload targeting this parameter to remotely extract sensitive information without requiring authentication or user interaction. The vulnerability is categorized under CWE-782, which relates to exposure of sensitive information through improper access control or input validation. The CVSS 3.1 score of 9.8 reflects the high impact on confidentiality, integrity, and availability, combined with the ease of remote exploitation over the network. Although no public exploits have been reported yet, the vulnerability's characteristics make it a prime candidate for exploitation. The absence of patch links suggests that a fix may not yet be publicly available, increasing the urgency for organizations to implement interim mitigations or monitor for updates from the vendor. This vulnerability could allow attackers to gain unauthorized access to user data, modify system configurations, or disrupt mail inspection services, potentially leading to broader network compromise.

Detailed information about CVE-2024-32370: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-32370: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-32370: n/a

SQL Injection vulnerability in HSC Cybersecurity HC Mailinspector 5.2.17-3 through 5.2.18 allows a remote attacker to obtain sensitive information via a crafted payload to the start and limit parameter in the mliWhiteList.php component.

CVE-2024-32369 identifies an SQL Injection vulnerability in the HC Mailinspector product by HSC Cybersecurity, specifically in versions 5.2.17-3 through 5.2.18. The vulnerability resides in the mliWhiteList.php component, which handles parameters 'start' and 'limit' used for pagination or data retrieval. These parameters are not properly sanitized or validated, allowing a remote attacker with limited privileges to inject crafted SQL payloads. This injection can be leveraged to extract sensitive information from the underlying database, potentially exposing confidential data such as user credentials, email filtering rules, or other sensitive configuration details. The attack vector is remote network access, requiring authentication but no user interaction, making it feasible for an insider threat or compromised user account to escalate information disclosure. The CVSS v3.1 base score is 4.3, reflecting a medium severity primarily due to the requirement for privileges and the limited scope of impact (confidentiality only). No integrity or availability impacts are noted. No public exploits or patches have been reported as of the publication date, indicating that organizations should be vigilant and monitor for updates. The vulnerability is categorized under CWE-89, a common and well-understood class of injection flaws.

Detailed information about CVE-2024-32369: n/a. Get real-time updates, technical details, and mitigation strategies.


CVE-2024-32371: n/aCVE-2024-32371 0 An issue in HSC Cybersecurity HC Mailinspector 5.2.17-3 through 5.2.18 allows a regular user account to escalate their privileges and gain administrative access by changing the type parameter from 1 to 0. HighVulnerabilityUnited StatesGermanyUnited Kingdom+7#cve #cve-2024-32371 Join the discussion	CVE Database V5	05/07/2024, 00:00:00 UTC Added: 02/25/2026, 21:40:07 UTC
CVE-2024-32370: n/aCVE-2024-32370 0 An issue in HSC Cybersecurity HC Mailinspector 5.2.17-3 through 5.2.18 allows a remote attacker to obtain sensitive information via a crafted payload to the id parameter in the mliSystemUsers.php component. CriticalVulnerabilityUnited StatesGermanyUnited Kingdom+7#cve #cve-2024-32370 Join the discussion	CVE Database V5	05/07/2024, 00:00:00 UTC Added: 02/25/2026, 21:40:07 UTC
CVE-2024-32369: n/aCVE-2024-32369 0 SQL Injection vulnerability in HSC Cybersecurity HC Mailinspector 5.2.17-3 through 5.2.18 allows a remote attacker to obtain sensitive information via a crafted payload to the start and limit parameter in the mliWhiteList.php component. MediumVulnerabilityUnited StatesGermanyUnited Kingdom+7#cve #cve-2024-32369 Join the discussion	CVE Database V5	05/07/2024, 00:00:00 UTC Added: 02/25/2026, 21:40:07 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional