Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

AlienVault OTX General

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit NetSec

Reddit Cybersecurity

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

doccano

auto-labeling-pipeline

An issue in Doccano Open source annotation tools for machine learning practitioners v.1.8.4 and Doccano Auto Labeling Pipeline module to annotate a document automatically v.0.1.23 allows a remote attacker to escalate privileges via a crafted REST Request.

CVE-2024-40442 is a vulnerability identified in Doccano, an open source annotation tool widely used by machine learning practitioners to label datasets. Specifically, versions 1.8.4 of the core Doccano tool and version 0.1.23 of the Auto Labeling Pipeline module are affected. The flaw allows a remote attacker to escalate privileges by crafting a malicious REST API request. The vulnerability is classified under CWE-94, which typically involves improper control of code generation or injection, suggesting that the crafted request may exploit unsafe handling of input leading to execution of unauthorized code or commands. The CVSS v3.1 score is 7.2, indicating high severity, with attack vector being network-based (AV:N), low attack complexity (AC:L), requiring privileges (PR:H), no user interaction (UI:N), unchanged scope (S:U), and high impact on confidentiality, integrity, and availability (C:H/I:H/A:H). This means the attacker must already have some level of privileges but can then escalate to higher privileges remotely without user interaction. The vulnerability could allow attackers to gain administrative control, manipulate or exfiltrate sensitive annotation data, or disrupt annotation services critical for machine learning workflows. No public exploits or patches are currently available, highlighting the need for proactive mitigation and monitoring by users of affected versions.

Detailed information about CVE-2024-40442: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-40442: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-40442: n/a

An issue in Doccano Open source annotation tools for machine learning practitioners v.1.8.4 and Doccano Auto Labeling Pipeline module to annotate a document automatically v.0.1.23 allows a remote attacker to escalate privileges via the model_attribs parameter.

CVE-2024-40441 is a vulnerability identified in Doccano, an open source annotation tool widely used by machine learning practitioners for labeling datasets. The affected versions are Doccano 1.8.4 and the Auto Labeling Pipeline module 0.1.23. The vulnerability arises from improper handling of the model_attribs parameter, which can be manipulated by a remote attacker to escalate privileges. This suggests that the application dynamically evaluates or processes this parameter insecurely, allowing attackers with some existing privileges to gain higher-level access, potentially leading to full system compromise. The CVSS v3.1 score of 6.6 reflects a medium severity, with attack vector being network-based (AV:N), requiring high privileges (PR:H), no user interaction (UI:N), and impacting confidentiality, integrity, and availability (C:H/I:H/A:H). The CWE-918 classification points to improper control of dynamically evaluated code or expressions, which often leads to code injection or privilege escalation. Although no public exploits are known at this time, the vulnerability poses a significant risk to environments running these Doccano versions, especially those exposed to untrusted networks or users. The lack of available patches at the time of publication necessitates immediate attention to mitigation strategies.

Detailed information about CVE-2024-40441: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-40441: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-40441: n/a


CVE-2024-40442: n/aCVE-2024-40442 0 An issue in Doccano Open source annotation tools for machine learning practitioners v.1.8.4 and Doccano Auto Labeling Pipeline module to annotate a document automatically v.0.1.23 allows a remote attacker to escalate privileges via a crafted REST Request. HighVulnerabilityUnited StatesGermanyUnited Kingdom+7#cve #cve-2024-40442 Join the discussion	CVE Database V5	09/23/2024, 00:00:00 UTC Added: 02/25/2026, 21:42:01 UTC
CVE-2024-40441: n/aCVE-2024-40441 0 An issue in Doccano Open source annotation tools for machine learning practitioners v.1.8.4 and Doccano Auto Labeling Pipeline module to annotate a document automatically v.0.1.23 allows a remote attacker to escalate privileges via the model_attribs parameter. MediumVulnerabilityUnited StatesGermanyUnited Kingdom+7#cve #cve-2024-40441 Join the discussion	CVE Database V5	09/23/2024, 00:00:00 UTC Added: 02/25/2026, 21:42:01 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional