Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

Threatpost

SecurityWeek

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

windriver

Improper privilege management in Jungo WinDriver before 12.5.1 allows local attackers to escalate privileges and execute arbitrary code.

CVE-2024-25088 is a vulnerability identified in Jungo WinDriver, a widely used driver development toolkit that facilitates communication between software and hardware devices on Windows platforms. The flaw stems from improper privilege management, classified under CWE-269 (Improper Privilege Management), which allows local attackers to escalate their privileges beyond intended limits. Specifically, attackers with limited local access can exploit this vulnerability to execute arbitrary code with elevated privileges, potentially gaining full control over the affected system. The vulnerability affects all versions of Jungo WinDriver prior to 12.5.1, although exact affected versions are not specified. The CVSS v3.1 base score of 7.8 reflects a high severity, with attack vector being local (AV:L), low attack complexity (AC:L), requiring low privileges (PR:L), no user interaction (UI:N), and impacting confidentiality, integrity, and availability (C:H/I:H/A:H). Exploitation does not require user interaction, increasing the risk in multi-user environments or systems where local accounts have limited restrictions. No public exploits or active exploitation have been reported yet, but the vulnerability poses a significant risk due to the potential for privilege escalation and arbitrary code execution. Jungo WinDriver is commonly used in embedded systems, industrial control systems, and specialized hardware interfacing, making this vulnerability particularly relevant for sectors relying on such technologies.

Detailed information about CVE-2024-25088: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-25088: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-25088: n/a

Improper privilege management in Jungo WinDriver before 12.5.1 allows local attackers to escalate privileges, execute arbitrary code, or cause a Denial of Service (DoS).

CVE-2024-22106 is a vulnerability identified in Jungo WinDriver versions before 12.5.1, caused by improper privilege management (CWE-269). WinDriver is a software development kit used for creating device drivers that interface with hardware. The flaw allows local attackers with limited privileges to escalate their privileges to a higher level, enabling execution of arbitrary code with elevated rights or causing a denial of service (DoS) condition. The vulnerability is exploitable locally, requiring the attacker to have some level of access to the system but no user interaction is needed. The CVSS v3.1 base score is 8.8, indicating a high severity with a vector string AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H, meaning the attack vector is local, attack complexity is low, privileges required are low, no user interaction is needed, and the scope is changed affecting confidentiality, integrity, and availability at a high impact level. This vulnerability could be leveraged by malicious insiders or attackers who have gained limited system access to fully compromise the system or disrupt operations. No patches or exploits are currently publicly available, but the risk is significant due to the potential impact. The vulnerability affects the core privilege management mechanisms within the WinDriver software, which is critical for secure driver operation and system stability.

Detailed information about CVE-2024-22106: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-22106: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-22106: n/a

Out-of-Bounds Write vulnerability in Jungo WinDriver before 12.5.1 allows local attackers to cause a Windows blue screen error and Denial of Service (DoS).

CVE-2024-22104 is an out-of-bounds write vulnerability identified in Jungo WinDriver, a software development kit used for creating device drivers on Windows platforms. This vulnerability exists in versions before 12.5.1 and allows a local attacker with limited privileges to write outside the intended memory bounds. Such out-of-bounds writes can corrupt memory, leading to instability in the operating system. Specifically, exploitation of this flaw results in a Windows blue screen error (BSOD), effectively causing a denial of service (DoS) condition by crashing the system. The vulnerability does not compromise confidentiality or integrity, as it does not allow data leakage or unauthorized modification, but it severely impacts availability. The attack vector requires local access with low privileges and does not need user interaction, making it somewhat easier to exploit in environments where users have local accounts. Currently, there are no known exploits in the wild, and no official patches have been published, which means organizations must rely on mitigating controls until an update is available. The vulnerability is classified under CWE-400, which relates to uncontrolled resource consumption or memory corruption issues. Given the nature of Jungo WinDriver, this vulnerability is particularly relevant to organizations developing or deploying custom device drivers or embedded systems on Windows platforms.

Detailed information about CVE-2024-22104: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-22104: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-22104: n/a

Out-of-Bounds Write vulnerability in Jungo WinDriver before 12.6.0 allows local attackers to cause a Windows blue screen error and Denial of Service (DoS).

CVE-2024-22103 is classified as an out-of-bounds write vulnerability (CWE-787) found in Jungo WinDriver, a driver development toolkit used to create custom device drivers on Windows platforms. This vulnerability exists in versions prior to 12.6.0 and allows a local attacker with low privileges to perform an out-of-bounds write operation, which corrupts memory and leads to a system crash manifested as a Windows blue screen of death (BSOD). The attack requires user interaction and has high attack complexity, meaning exploitation is not straightforward and may require specific conditions or knowledge of the target environment. The vulnerability affects availability by causing denial of service but does not compromise confidentiality or integrity of data. No public exploits have been reported, and no patches are currently linked, suggesting that remediation may rely on vendor updates or workarounds. The vulnerability is significant for environments where Jungo WinDriver is used, especially in embedded systems or specialized hardware interfacing on Windows, as a local attacker could disrupt critical operations by causing system instability or crashes.

Detailed information about CVE-2024-22103: n/a. Get real-time updates, technical details, and mitigation strategies.


CVE-2024-25088: n/aCVE-2024-25088 0 Improper privilege management in Jungo WinDriver before 12.5.1 allows local attackers to escalate privileges and execute arbitrary code. HighVulnerabilityUnited StatesGermanyJapan+7#cve #cve-2024-25088 Join the discussion	CVE Database V5	07/02/2024, 00:00:00 UTC Added: 02/25/2026, 21:45:03 UTC
CVE-2024-22106: n/aCVE-2024-22106 0 Improper privilege management in Jungo WinDriver before 12.5.1 allows local attackers to escalate privileges, execute arbitrary code, or cause a Denial of Service (DoS). HighVulnerabilityUnited StatesGermanyJapan+7#cve #cve-2024-22106 Join the discussion	CVE Database V5	07/02/2024, 00:00:00 UTC Added: 02/25/2026, 21:44:41 UTC
CVE-2024-22104: n/aCVE-2024-22104 0 Out-of-Bounds Write vulnerability in Jungo WinDriver before 12.5.1 allows local attackers to cause a Windows blue screen error and Denial of Service (DoS). MediumVulnerabilityUnited StatesGermanyJapan+7#cve #cve-2024-22104 Join the discussion	CVE Database V5	07/02/2024, 00:00:00 UTC Added: 02/25/2026, 21:44:41 UTC
CVE-2024-22103: n/aCVE-2024-22103 0 Out-of-Bounds Write vulnerability in Jungo WinDriver before 12.6.0 allows local attackers to cause a Windows blue screen error and Denial of Service (DoS). MediumVulnerabilityUnited StatesGermanyJapan+7#cve #cve-2024-22103 Join the discussion	CVE Database V5	07/02/2024, 00:00:00 UTC Added: 02/25/2026, 21:44:41 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional