Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

Threatpost

SecurityWeek

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

DedeV6

DedeBIZ v6.3.0 was discovered to contain an arbitrary file deletion vulnerability via the component /admin/file_manage_view.

CVE-2024-52771 identifies a critical security vulnerability in DedeBIZ version 6.3.0, a content management system widely used for website administration. The vulnerability resides in the /admin/file_manage_view component, which improperly restricts file path inputs, allowing attackers to perform arbitrary file deletion on the server. This is a classic example of CWE-22, where insufficient validation of user-supplied file paths enables directory traversal attacks. The vulnerability can be exploited remotely without any authentication or user interaction, making it highly accessible to attackers. Successful exploitation results in the deletion of arbitrary files, which can compromise the integrity and availability of the affected system. This could lead to denial of service conditions, loss of critical data, or disruption of website functionality. The CVSS v3.1 score of 9.1 reflects the vulnerability's high impact on integrity and availability, combined with its low attack complexity and no required privileges. Although no public exploits have been reported yet, the critical nature and ease of exploitation make it a prime target for attackers once exploit code becomes available. No official patches or updates have been released at the time of this report, necessitating immediate mitigation efforts by administrators. The vulnerability's presence in a popular CMS component suggests a broad potential attack surface, especially in regions where DedeBIZ is commonly deployed. Organizations should conduct thorough audits of their DedeBIZ installations and monitor for suspicious activity related to file management endpoints.

Detailed information about CVE-2024-52771: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-52771: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-52771: n/a

An arbitrary file upload vulnerability in the component /admin/file_manage_control of DedeBIZ v6.3.0 allows attackers to execute arbitrary code via uploading a crafted file.

CVE-2024-52770 is an arbitrary file upload vulnerability identified in the /admin/file_manage_control component of DedeBIZ version 6.3.0, a content management system (CMS). The vulnerability permits remote attackers to upload maliciously crafted files without authentication, enabling them to execute arbitrary code on the server. This is due to insufficient validation and sanitization of uploaded files within the administrative file management interface. The flaw falls under CWE-79, indicating improper neutralization of input leading to cross-site scripting or related injection issues, but here it manifests as an arbitrary file upload leading to remote code execution. The CVSS v3.1 base score is 9.8, with vector AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating network attack vector, low attack complexity, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability. The vulnerability was reserved on 2024-11-15 and published on 2024-11-20. No patches or official fixes have been released yet, and no exploits are known in the wild. However, the critical nature of this vulnerability means attackers could potentially gain full control over affected servers, leading to data breaches, service disruption, or use of compromised systems for further attacks.

Detailed information about CVE-2024-52770: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-52770: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-52770: n/a

An arbitrary file upload vulnerability in the component /admin/friendlink_edit of DedeBIZ v6.3.0 allows attackers to execute arbitrary code via uploading a crafted file.

CVE-2024-52769 is an arbitrary file upload vulnerability identified in the /admin/friendlink_edit component of DedeBIZ version 6.3.0, a content management system widely used for website management. The vulnerability arises from insufficient validation of uploaded files, allowing an attacker with administrative privileges to upload malicious files, such as web shells or scripts, which can then be executed on the server. This leads to remote code execution (RCE), enabling attackers to take full control over the affected system. The vulnerability is classified under CWE-434 (Unrestricted Upload of File with Dangerous Type). The CVSS v3.1 score of 7.2 indicates a high severity, with an attack vector over the network (AV:N), low attack complexity (AC:L), requiring high privileges (PR:H), no user interaction (UI:N), and impacting confidentiality, integrity, and availability (C:H/I:H/A:H). Although no public exploits have been reported yet, the vulnerability's nature suggests that exploitation could allow attackers to bypass security controls, manipulate data, disrupt services, or use the compromised server as a pivot point for further attacks. The lack of available patches at the time of publication increases the risk for organizations relying on this software. The vulnerability specifically affects the administrative interface, meaning that attackers must first gain or already possess high-level access, which could be through credential compromise or insider threat. This vulnerability underscores the importance of secure file upload handling and strict access controls in web applications.

Detailed information about CVE-2024-52769: n/a. Get real-time updates, technical details, and mitigation strategies.


CVE-2024-52771: n/aCVE-2024-52771 0 DedeBIZ v6.3.0 was discovered to contain an arbitrary file deletion vulnerability via the component /admin/file_manage_view. CriticalVulnerabilityChinaTaiwanSingapore+7#cve #cve-2024-52771 Join the discussion	CVE Database V5	11/20/2024, 00:00:00 UTC Added: 02/25/2026, 21:38:00 UTC
CVE-2024-52770: n/aCVE-2024-52770 0 An arbitrary file upload vulnerability in the component /admin/file_manage_control of DedeBIZ v6.3.0 allows attackers to execute arbitrary code via uploading a crafted file. CriticalVulnerabilityChinaJapanSouth Korea+8#cve #cve-2024-52770 Join the discussion	CVE Database V5	11/20/2024, 00:00:00 UTC Added: 02/25/2026, 21:38:00 UTC
CVE-2024-52769: n/aCVE-2024-52769 0 An arbitrary file upload vulnerability in the component /admin/friendlink_edit of DedeBIZ v6.3.0 allows attackers to execute arbitrary code via uploading a crafted file. HighVulnerabilityChinaUnited StatesIndia+7#cve #cve-2024-52769 Join the discussion	CVE Database V5	11/20/2024, 00:00:00 UTC Added: 02/25/2026, 21:38:00 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional