Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

JFinalCMS

An issue was discovered in JFinalCMS v.5.0.0. There is a SQL injection vulnerablity via /admin/div_data/data

CVE-2024-40322 is a SQL injection vulnerability identified in JFinalCMS version 5.0.0, a content management system widely used for web application development. The vulnerability exists in the /admin/div_data/data endpoint, where user-supplied input is improperly sanitized before being incorporated into SQL queries. This improper input validation allows an attacker to inject malicious SQL code, potentially enabling unauthorized data access, modification, or deletion within the backend database. The CVSS 3.1 vector indicates that the attack can be performed remotely over the network (AV:N) with low attack complexity (AC:L), requiring low privileges (PR:L) but no user interaction (UI:N). The scope is unchanged (S:U), and the impact affects confidentiality, integrity, and availability to a low extent (C:L/I:L/A:L). Although no known exploits have been reported in the wild, the vulnerability represents a significant risk due to the commonality of SQL injection attacks and the critical role of CMS platforms in managing website content and data. The lack of an official patch at the time of disclosure necessitates immediate mitigation efforts by administrators. The CWE-89 classification confirms this is a classic SQL injection issue, emphasizing the need for proper input validation and parameterized queries.

Detailed information about CVE-2024-40322: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-40322: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-40322: n/a

JFinalcms

A stored XSS vulnerability exists in JFinalcms 5.0.0 via the /gusetbook/save content parameter, which allows remote attackers to inject arbitrary web script or HTML.

CVE-2024-22493 is a stored Cross-Site Scripting (XSS) vulnerability identified in JFinalcms version 5.0.0. The vulnerability resides in the /gusetbook/save endpoint, specifically within the content parameter, which fails to properly sanitize or encode user-supplied input. This allows remote attackers with limited privileges (authentication required) to inject malicious JavaScript or HTML code that is stored persistently on the server. When other users access the affected pages, the injected scripts execute in their browsers, potentially leading to session hijacking, defacement, or unauthorized actions performed on behalf of the victim. The vulnerability is classified under CWE-79, indicating improper neutralization of input during web page generation. The CVSS v3.1 base score is 5.4, reflecting medium severity, with attack vector network (remote), low attack complexity, privileges required, user interaction required, and scope changed due to potential impact on other users. No public exploits are currently known, but the vulnerability poses a risk especially in environments where multiple users interact with the guestbook feature. The lack of available patches at the time of disclosure necessitates immediate attention to mitigation strategies.

Detailed information about CVE-2024-22493: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-22493: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-22493: n/a


CVE-2024-40322: n/aCVE-2024-40322 0 An issue was discovered in JFinalCMS v.5.0.0. There is a SQL injection vulnerablity via /admin/div_data/data MediumVulnerabilityChinaIndiaSouth Korea+7#cve #cve-2024-40322 Join the discussion	CVE Database V5	07/16/2024, 00:00:00 UTC Added: 02/25/2026, 21:41:58 UTC
CVE-2024-22493: n/aCVE-2024-22493 0 A stored XSS vulnerability exists in JFinalcms 5.0.0 via the /gusetbook/save content parameter, which allows remote attackers to inject arbitrary web script or HTML. MediumVulnerabilityChinaUnited StatesIndia+7#cve #cve-2024-22493 Join the discussion	CVE Database V5	01/12/2024, 00:00:00 UTC Added: 02/25/2026, 21:44:43 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional