Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

MP-SPDZ

MP-SPDZ v0.3.8 was discovered to contain a segmentation violation via the function osuCrypto::SilentMultiPprfReceiver::expand in /Tools/SilentPprf.cpp. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted message.

CVE-2024-33783 identifies a vulnerability in MP-SPDZ version 0.3.8, a software framework used for secure multi-party computation (MPC). The issue arises from a segmentation violation in the function osuCrypto::SilentMultiPprfReceiver::expand located in the SilentPprf.cpp source file. This function is part of the cryptographic protocol implementation, specifically handling silent pseudorandom function (PRF) expansions. The segmentation fault is triggered when the function processes a specially crafted message, which leads to improper memory access, causing the application to crash. The root cause aligns with CWE-120, indicating a buffer overflow or improper bounds checking during memory operations. The vulnerability can be exploited remotely over the network (AV:N) without requiring privileges (PR:N), but it does require user interaction (UI:R) in the form of processing the malicious message. The scope is unchanged (S:U), and the impact is limited to availability (A:H), with no confidentiality or integrity impact. The CVSS v3.1 base score is 6.5, reflecting a medium severity level. No patches or known exploits have been reported at the time of publication, but the vulnerability poses a risk of denial of service to systems running the affected MP-SPDZ version.

Detailed information about CVE-2024-33783: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-33783: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-33783: n/a

MP-SPDZ v0.3.8 was discovered to contain a stack overflow via the function octetStream::get_bytes in /Tools/octetStream.cpp. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted message.

CVE-2024-33781 identifies a stack overflow vulnerability in MP-SPDZ version 0.3.8, a framework used for secure multi-party computation. The flaw resides in the octetStream::get_bytes function located in the /Tools/octetStream.cpp source file. This function improperly handles input data, allowing an attacker to craft a malicious message that causes a stack overflow condition. The overflow can lead to a denial of service by crashing the application, thereby impacting availability. The vulnerability is classified under CWE-125 (Out-of-bounds Read), indicating that the function reads memory outside the intended buffer boundaries. Exploitation requires no authentication or user interaction and can be performed remotely over the network, as indicated by the CVSS vector (AV:N/AC:L/PR:N/UI:N). The CVSS score of 7.5 reflects a high severity due to the ease of exploitation and the potential to disrupt critical services relying on MP-SPDZ. No patches or known exploits have been reported yet, suggesting that the vulnerability is newly disclosed and may require immediate attention from users of this software. The vulnerability's impact is limited to denial of service, with no direct compromise of confidentiality or integrity reported.

Detailed information about CVE-2024-33781: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-33781: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-33781: n/a

MP-SPDZ v0.3.8 was discovered to contain a segmentation violation via the function osuCrypto::copyOut at /Tools/SilentPprf.cpp. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted message.

CVE-2024-33780 identifies a segmentation fault vulnerability in MP-SPDZ version 0.3.8, specifically within the osuCrypto::copyOut function located in the /Tools/SilentPprf.cpp source file. MP-SPDZ is a framework for secure multi-party computation (MPC), which is used to perform computations on encrypted data without revealing the inputs. The vulnerability arises from improper handling of input data leading to a buffer overflow or out-of-bounds memory access (CWE-120). When a specially crafted message is processed by the vulnerable function, it causes a segmentation violation, crashing the process and resulting in a Denial of Service (DoS). The CVSS 3.1 base score is 6.5, reflecting a medium severity level, with attack vector being network-based (AV:N), low attack complexity (AC:L), no privileges required (PR:N), but requiring user interaction (UI:R). The impact is limited to availability (A:H), with no confidentiality or integrity loss. No patches or fixes have been released at the time of publication, and no active exploitation has been reported. This vulnerability highlights the importance of robust input validation and memory safety in cryptographic and MPC frameworks.

Detailed information about CVE-2024-33780: n/a. Get real-time updates, technical details, and mitigation strategies.


CVE-2024-33783: n/aCVE-2024-33783 0 MP-SPDZ v0.3.8 was discovered to contain a segmentation violation via the function osuCrypto::SilentMultiPprfReceiver::expand in /Tools/SilentPprf.cpp. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted message. MediumVulnerabilityUnited StatesGermanyUnited Kingdom+7#cve #cve-2024-33783 Join the discussion	CVE Database V5	05/07/2024, 00:00:00 UTC Added: 02/25/2026, 21:40:21 UTC
CVE-2024-33781: n/aCVE-2024-33781 0 MP-SPDZ v0.3.8 was discovered to contain a stack overflow via the function octetStream::get_bytes in /Tools/octetStream.cpp. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted message. HighVulnerabilityUnited StatesGermanyUnited Kingdom+7#cve #cve-2024-33781 Join the discussion	CVE Database V5	05/07/2024, 00:00:00 UTC Added: 02/25/2026, 21:40:21 UTC
CVE-2024-33780: n/aCVE-2024-33780 0 MP-SPDZ v0.3.8 was discovered to contain a segmentation violation via the function osuCrypto::copyOut at /Tools/SilentPprf.cpp. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted message. MediumVulnerabilityUnited StatesGermanyUnited Kingdom+7#cve #cve-2024-33780 Join the discussion	CVE Database V5	05/07/2024, 00:00:00 UTC Added: 02/25/2026, 21:40:21 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional