Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

AlienVault OTX General

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit NetSec

Reddit Cybersecurity

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

productdesigner

Server-Side Request Forgery (SSRF) vulnerability in Tunis Soft "Product Designer" (productdesigner) module for PrestaShop before version 1.178.36, allows remote attackers to cause a denial of service (DoS) and escalate privileges via the url parameter in the postProcess() method.

CVE-2024-26469 is a Server-Side Request Forgery (SSRF) vulnerability identified in the Tunis Soft "Product Designer" module for PrestaShop, a popular e-commerce platform. The vulnerability exists in versions prior to 1.178.36 and is triggered via the url parameter in the postProcess() method. SSRF vulnerabilities allow attackers to make the server perform unintended requests, potentially accessing internal resources or services that are otherwise inaccessible externally. In this case, the vulnerability enables remote attackers with some level of privileges (PR:L) to cause a denial of service (DoS) and escalate their privileges by manipulating the url parameter. The CVSS 3.1 base score is 8.1, indicating a high severity, with an attack vector of network (AV:N), low attack complexity (AC:L), and no user interaction (UI:N). The impact on confidentiality is high (C:H), while integrity is not impacted (I:N), and availability is high (A:H). The vulnerability is linked to CWE-352, which relates to Cross-Site Request Forgery (CSRF), suggesting that the vulnerability may involve improper validation or protection against forged requests. Although no public exploits are currently known, the potential for privilege escalation and DoS makes this a critical concern for affected PrestaShop installations using the vulnerable module.

Detailed information about CVE-2024-26469: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-26469: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-26469: n/a

An issue was discovered in Tunis Soft "Product Designer" (productdesigner) module for PrestaShop before version 1.178.36, allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive information via the postProcess() method.

CVE-2024-24302 is a critical vulnerability discovered in the Tunis Soft Product Designer module integrated with PrestaShop, an open-source e-commerce platform. The vulnerability affects versions prior to 1.178.36 and stems from unsafe handling within the postProcess() method. Specifically, it is categorized under CWE-502, which involves unsafe deserialization of untrusted data. This flaw enables remote attackers to send crafted requests that the postProcess() method processes without proper validation or sanitization, leading to arbitrary code execution on the server. Because the vulnerability requires no authentication or user interaction (as indicated by the CVSS vector AV:N/AC:L/PR:N/UI:N), attackers can exploit it remotely over the network with minimal effort. Successful exploitation allows attackers to escalate privileges, potentially gaining administrative control over the PrestaShop instance, and extract sensitive information stored or processed by the module. The impact spans confidentiality, integrity, and availability, as attackers can manipulate data, disrupt services, or deploy further malware. While no public exploits have been reported yet, the high CVSS score (9.8) reflects the critical nature and ease of exploitation. The lack of available patches at the time of disclosure increases the urgency for organizations to implement interim mitigations or upgrade once patches are released. Given PrestaShop’s widespread use in global e-commerce, this vulnerability poses a significant threat to online retailers relying on the affected module.

Detailed information about CVE-2024-24302: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-24302: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-24302: n/a


CVE-2024-26469: n/aCVE-2024-26469 0 Server-Side Request Forgery (SSRF) vulnerability in Tunis Soft "Product Designer" (productdesigner) module for PrestaShop before version 1.178.36, allows remote attackers to cause a denial of service (DoS) and escalate privileges via the url parameter in the postProcess() method. HighVulnerabilityUnited StatesGermanyFrance+7#cve #cve-2024-26469 Join the discussion	CVE Database V5	03/03/2024, 00:00:00 UTC Added: 02/25/2026, 21:45:27 UTC
CVE-2024-24302: n/aCVE-2024-24302 0 An issue was discovered in Tunis Soft "Product Designer" (productdesigner) module for PrestaShop before version 1.178.36, allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive information via the postProcess() method. CriticalVulnerabilityUnited StatesFranceGermany+11#cve #cve-2024-24302 Join the discussion	CVE Database V5	03/03/2024, 00:00:00 UTC Added: 02/25/2026, 21:44:56 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional