Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

flusity-CMS

flusity CMS through 2.45 allows tools/addons_model.php Gallery Name XSS. The reporter indicates that this product "ceased its development as of February 2024."

CVE-2024-27757 identifies a reflected cross-site scripting (XSS) vulnerability in the flusity CMS, a content management system that has been discontinued as of February 2024. The vulnerability exists in the Gallery Name parameter within the tools/addons_model.php script, where insufficient input validation allows attackers to inject malicious JavaScript code. When a victim accesses a crafted URL or interacts with the vulnerable parameter, the injected script executes in their browser context. This can lead to session hijacking, theft of sensitive information, or unauthorized actions performed on behalf of the user. The vulnerability has a CVSS 3.1 base score of 6.1, reflecting medium severity, with an attack vector of network (remote), low attack complexity, no privileges required, but requiring user interaction. The scope is changed, meaning the vulnerability can affect resources beyond the vulnerable component. No official patches or updates are available due to the cessation of flusity CMS development, increasing the risk for users who continue to operate this software. No known exploits have been reported in the wild, but the presence of CWE-79 (Improper Neutralization of Input During Web Page Generation) confirms the nature of the XSS flaw. This vulnerability primarily threatens confidentiality and integrity, with no direct impact on availability.

Detailed information about CVE-2024-27757: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-27757: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-27757: n/a

flusity-CMS 2.33 is vulnerable to Unrestricted Upload of File with Dangerous Type in update_setting.php.

The vulnerability identified as CVE-2024-25410 affects flusity-CMS version 2.33 and is classified under CWE-434: Unrestricted Upload of File with Dangerous Type. The issue resides in the update_setting.php component, where the application fails to properly restrict the types of files that can be uploaded. This allows an unauthenticated attacker (no privileges required) to upload files that could be malicious, such as web shells or scripts, by exploiting the lack of proper validation and sanitization of uploaded files. The vulnerability requires user interaction, meaning the attacker must submit a crafted upload request to the vulnerable endpoint. The CVSS v3.1 base score is 6.5 (medium severity), reflecting the network attack vector (AV:N), low attack complexity (AC:L), no privileges required (PR:N), but requiring user interaction (UI:R). The impact is limited to integrity (I:H) with no direct confidentiality or availability impact. Although no known exploits have been reported in the wild, the potential for attackers to upload executable code or malicious content poses a significant risk to the affected systems. No patches or official fixes have been published at the time of disclosure, increasing the urgency for organizations to apply mitigations. The vulnerability could be leveraged to gain unauthorized control over the CMS environment, leading to defacement, data tampering, or further compromise of the hosting infrastructure.

Detailed information about CVE-2024-25410: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-25410: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-25410: n/a

flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /core/tools/add_places.php

CVE-2024-26352 identifies a Cross-Site Request Forgery (CSRF) vulnerability in flusity-CMS version 2.33, specifically within the /core/tools/add_places.php component. CSRF vulnerabilities occur when an attacker tricks an authenticated user into submitting a forged HTTP request, causing the user’s browser to perform unwanted actions on a web application in which they are authenticated. In this case, the vulnerability allows attackers to perform high-impact actions without requiring any privileges, exploiting the lack of proper CSRF protections such as anti-CSRF tokens or origin validation. The CVSS v3.1 score of 8.8 reflects the high severity, with an attack vector over the network, low complexity, no privileges required, but requiring user interaction (the victim must be tricked into clicking a malicious link or visiting a crafted webpage). The vulnerability affects confidentiality, integrity, and availability, meaning attackers could potentially manipulate sensitive data, alter system configurations, or disrupt service availability. No patches or exploit code are currently publicly available, but the vulnerability’s presence in a core CMS component makes it a critical risk for websites relying on flusity-CMS. Organizations using this CMS should prioritize mitigation to prevent potential exploitation.

Detailed information about CVE-2024-26352: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-26352: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-26352: n/a

Directory Traversal vulnerability in flusity CMS v.2.4 allows a remote attacker to execute arbitrary code and obtain sensitive information via the download_backup.php component.

CVE-2024-25502 is a critical security vulnerability identified in Flusity CMS version 2.4, involving a directory traversal flaw in the download_backup.php component. Directory traversal vulnerabilities allow attackers to manipulate file paths to access files and directories outside the intended scope, potentially leading to unauthorized file access. In this case, the flaw enables remote attackers to execute arbitrary code and retrieve sensitive information without requiring any authentication or user interaction. The vulnerability is classified under CWE-94, which corresponds to improper control of code generation, indicating that the flaw may allow injection or execution of malicious code. The CVSS v3.1 base score of 9.8 reflects the vulnerability's high impact on confidentiality, integrity, and availability, with an attack vector over the network, low attack complexity, no privileges required, and no user interaction needed. The affected component, download_backup.php, likely handles backup file downloads, and improper input validation or sanitization in this script leads to the directory traversal and code execution. Although no public exploits have been reported yet, the vulnerability's characteristics make it an attractive target for attackers seeking to compromise web servers running Flusity CMS. The lack of available patches or updates at the time of publication increases the urgency for organizations to implement interim mitigations and monitor their environments closely.

Detailed information about CVE-2024-25502: n/a. Get real-time updates, technical details, and mitigation strategies.


CVE-2024-27757: n/aCVE-2024-27757 0 flusity CMS through 2.45 allows tools/addons_model.php Gallery Name XSS. The reporter indicates that this product "ceased its development as of February 2024." MediumVulnerabilityUnited StatesGermanyUnited Kingdom+7#cve #cve-2024-27757 Join the discussion	CVE Database V5	03/18/2024, 00:00:00 UTC Added: 02/25/2026, 21:45:43 UTC
CVE-2024-25410: n/aCVE-2024-25410 0 flusity-CMS 2.33 is vulnerable to Unrestricted Upload of File with Dangerous Type in update_setting.php. MediumVulnerabilityUnited StatesGermanyUnited Kingdom+7#cve #cve-2024-25410 Join the discussion	CVE Database V5	02/26/2024, 00:00:00 UTC Added: 02/25/2026, 21:45:12 UTC
CVE-2024-26352: n/aCVE-2024-26352 0 flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /core/tools/add_places.php HighVulnerabilityUnited StatesGermanyUnited Kingdom+7#cve #cve-2024-26352 Join the discussion	CVE Database V5	02/22/2024, 00:00:00 UTC Added: 02/25/2026, 21:45:25 UTC
CVE-2024-25502: n/aCVE-2024-25502 0 Directory Traversal vulnerability in flusity CMS v.2.4 allows a remote attacker to execute arbitrary code and obtain sensitive information via the download_backup.php component. CriticalVulnerabilityUnited StatesGermanyUnited Kingdom+7#cve #cve-2024-25502 Join the discussion	CVE Database V5	02/15/2024, 00:00:00 UTC Added: 02/25/2026, 21:45:12 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional