Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

Threatpost

SecurityWeek

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

domainmod

In segments\edit.php of DomainMOD below v4.12.0, the segid parameter in the GET request can be exploited to cause a reflected Cross Site Scripting (XSS) vulnerability.

CVE-2024-48624 identifies a reflected Cross Site Scripting (XSS) vulnerability in DomainMOD, an open-source domain portfolio management application, specifically in the segments\edit.php script. The vulnerability is triggered by the 'segid' parameter in HTTP GET requests, which is not properly sanitized or encoded before being reflected in the web response. This allows an attacker to craft a malicious URL containing JavaScript code that executes in the context of the victim's browser when the URL is accessed. The vulnerability requires the attacker to have low privileges (authenticated user) but does not require user interaction beyond visiting the crafted URL. The reflected XSS can lead to theft of session cookies, defacement, or redirection to malicious sites, impacting confidentiality, integrity, and availability of the affected system. The CVSS 3.1 base score is 5.3, reflecting medium severity due to the limited scope and requirement for authentication. No public exploits have been reported yet, but the vulnerability is publicly disclosed as of October 15, 2024. The lack of a patch link suggests that a fix may be pending or users must upgrade to version 4.12.0 or later where the issue is resolved. The CWE-79 classification confirms this is a classic XSS flaw caused by improper input validation and output encoding.

Detailed information about CVE-2024-48624: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-48624: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-48624: n/a

In queue\index.php of DomainMOD below v4.12.0, the list_id and domain_id parameters in the GET request can be exploited to cause a reflected Cross Site Scripting (XSS).

CVE-2024-48623 is a reflected Cross Site Scripting (XSS) vulnerability identified in the DomainMOD application, specifically in versions prior to 4.12.0. The vulnerability exists in the queue\index.php script, where the GET parameters list_id and domain_id are not properly sanitized or encoded before being reflected in the HTTP response. This lack of input validation allows an attacker to craft a malicious URL containing executable JavaScript code within these parameters. When a victim accesses this crafted URL, the injected script executes in the context of the victim's browser, potentially leading to session hijacking, credential theft, or unauthorized actions performed on behalf of the user. The vulnerability requires the attacker to have at least local privileges (AV:L) and low attack complexity (AC:L), with no user interaction needed (UI:N). The scope is unchanged (S:U), and the impact affects confidentiality, integrity, and availability to a limited extent (C:L/I:L/A:L). Although no public exploits have been reported yet, the vulnerability is classified under CWE-79, a common and well-understood web security weakness. The reflected XSS can be leveraged in phishing campaigns or to escalate attacks within trusted networks. DomainMOD is a domain management tool used by organizations managing domain portfolios, making this vulnerability relevant to those environments. The absence of an official patch at the time of disclosure necessitates immediate mitigation efforts to reduce risk.

Detailed information about CVE-2024-48623: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-48623: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-48623: n/a

A cross-site scripting (XSS) issue in DomainMOD below v4.12.0 allows remote attackers to inject JavaScript code via admin/domain-fields/edit.php and the cdfid parameter.

CVE-2024-48622 is a reflected cross-site scripting (XSS) vulnerability identified in DomainMOD, an open-source domain management system, affecting versions below 4.12.0. The vulnerability arises from insufficient input sanitization of the 'cdfid' parameter in the admin/domain-fields/edit.php endpoint. An attacker with limited privileges (PR:L) can craft a malicious URL containing JavaScript payloads injected into this parameter, which, when accessed by an administrator or user with access to this page, results in script execution within their browser context. This can lead to session hijacking, theft of sensitive information, or unauthorized actions performed on behalf of the victim. The CVSS 3.1 vector (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L) indicates that the attack requires local access (AV:L), low attack complexity (AC:L), privileges (PR:L), no user interaction (UI:N), and impacts confidentiality highly, with limited integrity and availability impacts. The vulnerability is currently published without any known exploits in the wild, but the presence of the flaw in a critical administrative interface elevates its risk. No official patches are linked yet, so mitigation may require configuration changes or access restrictions until an update is available.

Detailed information about CVE-2024-48622: n/a. Get real-time updates, technical details, and mitigation strategies.


CVE-2024-48624: n/aCVE-2024-48624 0 In segments\edit.php of DomainMOD below v4.12.0, the segid parameter in the GET request can be exploited to cause a reflected Cross Site Scripting (XSS) vulnerability. MediumVulnerabilityUnited StatesGermanyUnited Kingdom+7#cve #cve-2024-48624 Join the discussion	CVE Database V5	10/15/2024, 00:00:00 UTC Added: 02/25/2026, 21:36:52 UTC
CVE-2024-48623: n/aCVE-2024-48623 0 In queue\index.php of DomainMOD below v4.12.0, the list_id and domain_id parameters in the GET request can be exploited to cause a reflected Cross Site Scripting (XSS). MediumVulnerabilityUnited StatesCanadaUnited Kingdom+7#cve #cve-2024-48623 Join the discussion	CVE Database V5	10/15/2024, 00:00:00 UTC Added: 02/25/2026, 21:36:52 UTC
CVE-2024-48622: n/aCVE-2024-48622 0 A cross-site scripting (XSS) issue in DomainMOD below v4.12.0 allows remote attackers to inject JavaScript code via admin/domain-fields/edit.php and the cdfid parameter. MediumVulnerabilityUnited StatesGermanyUnited Kingdom+7#cve #cve-2024-48622 Join the discussion	CVE Database V5	10/15/2024, 00:00:00 UTC Added: 02/25/2026, 21:36:52 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional