Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

AlienVault OTX General

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit NetSec

Reddit Cybersecurity

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

2024-CVE

Silicon Labs Z-Wave Series 500 v6.84.0 was discovered to contain insecure permissions.

CVE-2024-50931 identifies a vulnerability in Silicon Labs Z-Wave Series 500 firmware version 6.84.0, characterized by insecure permissions that could be exploited to disrupt device availability. Z-Wave is a widely used wireless communication protocol for smart home and IoT devices, and the Series 500 chipsets are embedded in numerous products globally. The vulnerability is classified under CWE-281, which involves improper permission management, suggesting that certain operations or resources are accessible without adequate restrictions. According to the CVSS 3.1 vector (AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H), exploitation requires physical access to the device but no privileges or user interaction, and the impact is limited to availability, potentially causing denial of service conditions. This could manifest as device malfunctions, resets, or communication failures, undermining the reliability of smart home systems. No patches or mitigations have been officially released yet, and no active exploitation has been reported. The vulnerability's presence in firmware implies that affected devices must receive firmware updates once available to remediate the issue. Given the physical access requirement, attackers would need proximity or direct contact with the device, limiting remote exploitation but still posing risks in shared or unsecured environments.

Detailed information about CVE-2024-50931: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-50931: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-50931: n/a

An issue in Silicon Labs Z-Wave Series 500 v6.84.0 allows attackers to execute arbitrary code.

CVE-2024-50930 is a critical vulnerability identified in Silicon Labs Z-Wave Series 500 firmware version 6.84.0. This vulnerability enables remote attackers to execute arbitrary code on affected devices without requiring any authentication or user interaction, as indicated by the CVSS vector AV:A/AC:L/PR:N/UI:N. The vulnerability falls under CWE-281, which typically involves improper authentication or authorization, suggesting that the Z-Wave implementation fails to adequately verify the legitimacy of commands or data received. Given that Z-Wave is a widely used wireless communication protocol for smart home and IoT devices, this flaw could allow attackers within adjacent network range (e.g., within wireless range or local network) to compromise devices, potentially gaining full control. The impact includes complete compromise of confidentiality, integrity, and availability of the affected devices, as attackers can execute arbitrary code, potentially leading to device takeover, data leakage, or disruption of device functionality. No patches or fixes have been published at the time of disclosure, and no known exploits have been observed in the wild, but the high CVSS score underscores the urgency for remediation. The vulnerability's exploitation does not require privileges or user interaction, increasing the risk profile. Organizations using Z-Wave Series 500 devices should be aware of this threat and prepare for mitigation once vendor updates are available.

Detailed information about CVE-2024-50930: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-50930: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-50930: n/a

Insecure permissions in Silicon Labs (SiLabs) Z-Wave Series 700 and 800 v7.21.1 allow attackers to arbitrarily change the device type in the controller's memory, leading to a Denial of Service (DoS).

CVE-2024-50929 is a vulnerability identified in Silicon Labs Z-Wave Series 700 and 800 controllers running firmware version 7.21.1. The root cause is insecure permissions that permit an attacker to arbitrarily change the device type information stored in the controller's memory. This device type information is critical for the controller to correctly manage and communicate with connected Z-Wave devices. By altering this data, an attacker can induce a Denial of Service (DoS) condition, effectively disrupting the controller's ability to operate normally within the Z-Wave network. The vulnerability is classified under CWE-281 (Improper Restriction of Operations within the Bounds of a Memory Buffer or Object), indicating improper access control. The CVSS v3.1 base score is 6.2, reflecting medium severity, with an attack vector of local access (AV:L), low attack complexity (AC:L), no privileges required (PR:N), no user interaction (UI:N), unchanged scope (S:U), no impact on confidentiality or integrity (C:N/I:N), and high impact on availability (A:H). No patches or mitigations have been officially released as of the publication date, and no known exploits have been detected in the wild. This vulnerability primarily affects environments where an attacker can gain local access to the controller device, such as through physical access or compromised local networks.

Detailed information about CVE-2024-50929: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-50929: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-50929: n/a

Insecure permissions in Silicon Labs (SiLabs) Z-Wave Series 700 and 800 v7.21.1 allow attackers to create a fake node via supplying crafted packets.

CVE-2024-50920 is a vulnerability identified in Silicon Labs Z-Wave Series 700 and 800 firmware version 7.21.1, involving insecure permissions that permit attackers to create a fake node within the Z-Wave network by sending specially crafted packets. Z-Wave is a wireless communication protocol widely used in smart home and IoT devices for automation and control. The vulnerability stems from improper access control (CWE-281), allowing unauthenticated attackers to inject malicious nodes without requiring user interaction. The CVSS v3.1 score of 8.8 reflects a high-severity issue with network attack vector (AV:A), low attack complexity (AC:L), no privileges required (PR:N), no user interaction (UI:N), and high impact on confidentiality, integrity, and availability (C:H/I:H/A:H). Exploiting this flaw could enable attackers to impersonate legitimate devices, manipulate device states, intercept or alter communications, and disrupt network operations. Although no public exploits have been reported yet, the vulnerability poses a significant risk to the security and reliability of Z-Wave-based systems. The lack of available patches necessitates immediate defensive measures to mitigate potential exploitation.

Detailed information about CVE-2024-50920: n/a. Get real-time updates, technical details, and mitigation strategies.


CVE-2024-50931: n/aCVE-2024-50931 0 Silicon Labs Z-Wave Series 500 v6.84.0 was discovered to contain insecure permissions. MediumVulnerabilityUnited StatesGermanyJapan+7#cve #cve-2024-50931 Join the discussion	CVE Database V5	12/10/2024, 00:00:00 UTC Added: 02/25/2026, 21:37:38 UTC
CVE-2024-50930: n/aCVE-2024-50930 0 An issue in Silicon Labs Z-Wave Series 500 v6.84.0 allows attackers to execute arbitrary code. HighVulnerabilityUnited StatesGermanyUnited Kingdom+7#cve #cve-2024-50930 Join the discussion	CVE Database V5	12/10/2024, 00:00:00 UTC Added: 02/25/2026, 21:37:38 UTC
CVE-2024-50929: n/aCVE-2024-50929 0 Insecure permissions in Silicon Labs (SiLabs) Z-Wave Series 700 and 800 v7.21.1 allow attackers to arbitrarily change the device type in the controller's memory, leading to a Denial of Service (DoS). MediumVulnerabilityUnited StatesGermanyUnited Kingdom+7#cve #cve-2024-50929 Join the discussion	CVE Database V5	12/10/2024, 00:00:00 UTC Added: 02/25/2026, 21:37:38 UTC
CVE-2024-50920: n/aCVE-2024-50920 0 Insecure permissions in Silicon Labs (SiLabs) Z-Wave Series 700 and 800 v7.21.1 allow attackers to create a fake node via supplying crafted packets. HighVulnerabilityUnited StatesGermanyUnited Kingdom+10#cve #cve-2024-50920 Join the discussion	CVE Database V5	12/10/2024, 00:00:00 UTC Added: 02/25/2026, 21:37:38 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional