Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

CVE Database V5

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

SmartFabric-OS10-Software

Dell SmartFabric OS10 Software, versions prior to 10.6.1.0, contain an Improper Control of Generation of Code ('Code Injection') vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution.

CVE-2024-48829 is a vulnerability identified in Dell's SmartFabric OS10 Software, versions prior to 10.6.1.0, involving improper control over the generation of code, which is a classic code injection flaw categorized under CWE-94. This vulnerability allows an attacker who already has high-level privileges and local access to the system to inject and execute arbitrary code. The flaw stems from insufficient validation or sanitization of inputs that influence code generation processes within the software, enabling malicious code to be introduced and executed. The attack vector is local, requiring the attacker to have elevated privileges, which limits the attack surface but increases the risk if such access is obtained. The vulnerability impacts confidentiality, integrity, and availability, as arbitrary code execution can lead to data breaches, system manipulation, or denial of service. The CVSS v3.1 base score of 6.7 reflects a medium severity, with low attack complexity but requiring high privileges and no user interaction. No public exploits or active exploitation have been reported to date. Dell has not yet published patches, but users are advised to monitor for updates and apply them promptly. This vulnerability is particularly critical for organizations relying on Dell SmartFabric OS10 for network fabric management and orchestration, as compromise could disrupt network operations and security.

Detailed information about CVE-2024-48829: CWE-94: Improper Control of Generation of Code ('Code Injection') in Dell SmartFabric OS10 Software affecting Dell Sm

CVE-2024-48829: CWE-94: Improper Control of Generation of Code ('Code Injection') in Dell SmartFabric OS10 Software - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-48829: CWE-94: Improper Control of Generation of Code ('Code Injection') in Dell SmartFabric OS10 Software

Dell SmartFabric OS10 Software, version(s) 10.5.4.x, 10.5.5.x, 10.5.6.x, 10.6.0.x, contain(s) an Incorrect Privilege Assignment vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.

CVE-2024-49561 is an Incorrect Privilege Assignment vulnerability (CWE-266) affecting Dell SmartFabric OS10 Software versions 10.5.4.x, 10.5.5.x, 10.5.6.x, and 10.6.0.x. The flaw allows a low-privileged attacker who has local access to the system to escalate their privileges, potentially gaining administrative or root-level control. This vulnerability arises from improper configuration or enforcement of privilege levels within the OS10 software, enabling unauthorized access to sensitive functions or data. The CVSS v3.1 base score is 7.8, reflecting high impact on confidentiality, integrity, and availability, with low attack complexity and no user interaction required. The attacker must have local access, which typically means physical access or access via a compromised internal network segment. No public exploits have been reported yet, but the vulnerability poses a significant risk in environments where Dell SmartFabric OS10 is used to manage network fabrics in data centers and enterprise networks. The vulnerability could allow attackers to manipulate network configurations, intercept or alter data flows, or disrupt network availability.

Detailed information about CVE-2024-49561: CWE-266: Incorrect Privilege Assignment in Dell SmartFabric OS10 Software affecting Dell SmartFabric OS10 Software. G

CVE-2024-49561: CWE-266: Incorrect Privilege Assignment in Dell SmartFabric OS10 Software - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-49561: CWE-266: Incorrect Privilege Assignment in Dell SmartFabric OS10 Software


CVE-2024-48829: CWE-94: Improper Control of Generation of Code ('Code Injection') in Dell SmartFabric OS10 SoftwareCVE-2024-48829 0 Dell SmartFabric OS10 Software, versions prior to 10.6.1.0, contain an Improper Control of Generation of Code ('Code Injection') vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution. MediumVulnerabilityUnited StatesGermanyUnited Kingdom+7#cve #cve-2024-48829 #cwe-94 Join the discussion	CVE Database V5	11/12/2025, 19:50:02 UTC Added: 11/12/2025, 20:03:02 UTC
CVE-2024-49561: CWE-266: Incorrect Privilege Assignment in Dell SmartFabric OS10 SoftwareCVE-2024-49561 0 Dell SmartFabric OS10 Software, version(s) 10.5.4.x, 10.5.5.x, 10.5.6.x, 10.6.0.x, contain(s) an Incorrect Privilege Assignment vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges. HighVulnerabilityUnited StatesGermanyUnited Kingdom+8#cve #cve-2024-49561 #cwe-266 Join the discussion	CVE Database V5	03/17/2025, 17:35:59 UTC Added: 02/26/2026, 19:51:30 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional