Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit NetSec

Reddit Cybersecurity

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

AWS Security Bulletins

GCP Kubernetes Security

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

litemall

A weakness has been identified in linlinjava litemall up to 1.8.0. Affected is an unknown function of the component Admin Endpoint. Executing a manipulation can lead to sql injection. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks. Multiple endpoints are affected. The vendor was contacted early about this disclosure but did not respond in any way.

This vulnerability in linlinjava litemall (up to version 1.8.0) involves SQL injection via an unknown function in the Admin Endpoint. Remote attackers can exploit this weakness to inject malicious SQL commands, potentially compromising the database. Multiple endpoints are affected, increasing the attack surface. Although an exploit is publicly available, there is no vendor response or official fix at this time. The CVSS 4.0 base score is 5.1, reflecting medium severity with network attack vector, low complexity, no privileges required, and no user interaction needed.

Detailed information about CVE-2026-8772: SQL Injection in linlinjava litemall affecting linlinjava litemall. Get real-time updates, technical details, and miti

CVE-2026-8772: SQL Injection in linlinjava litemall - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-8772: SQL Injection in linlinjava litemall

A SQL injection vulnerability in linlinjava litemall 1.8.0 allows a remote attacker to obtain sensitive information via the goodsId, goodsSn, and name parameters in AdminOrderController.java.

This vulnerability is a SQL injection (CWE-89) in linlinjava litemall 1.8.0, specifically in the AdminOrderController.java file. An attacker with network access and limited privileges can manipulate the goodsId, goodsSn, and name parameters to execute unauthorized SQL queries, resulting in unauthorized disclosure of sensitive information. The CVSS vector (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) indicates network attack vector, low attack complexity, required privileges, no user interaction, unchanged scope, high confidentiality impact, and no integrity or availability impact. No patch or official fix information is currently available.

Detailed information about CVE-2024-46382: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-46382: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-46382: n/a

SQL injection vulnerability in linlinjava litemall v.1.8.0 allows a remote attacker to obtain sensitive information via the nickname, consignee, orderSN, orderStatusArray parameters of the AdminOrdercontroller.java component.

CVE-2024-24323 identifies a SQL injection vulnerability in the linlinjava litemall e-commerce platform, specifically version 1.8.0. The vulnerability exists in the AdminOrdercontroller.java component, where certain parameters—nickname, consignee, orderSN, and orderStatusArray—are not properly sanitized before being used in SQL queries. This improper input validation allows a remote attacker with administrative privileges to inject malicious SQL code, potentially extracting sensitive data from the backend database, modifying order information, or disrupting database availability. The CVSS 3.1 base score of 7.2 reflects the high impact on confidentiality, integrity, and availability, with an attack vector over the network, low attack complexity, and requiring high privileges but no user interaction. Although no public exploits are currently known, the vulnerability aligns with CWE-89 (Improper Neutralization of Special Elements used in an SQL Command), a common and critical web application security flaw. The lack of available patches at the time of publication necessitates immediate attention from administrators to implement workarounds or input validation controls.

Detailed information about CVE-2024-24323: n/a. Get real-time updates, technical details, and mitigation strategies.


CVE-2026-8772: SQL Injection in linlinjava litemallCVE-2026-8772 0 A weakness has been identified in linlinjava litemall up to 1.8.0. Affected is an unknown function of the component Admin Endpoint. Executing a manipulation can lead to sql injection. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks. Multiple endpoints are affected. The vendor was contacted early about this disclosure but did not respond in any way. MediumVulnerability#cve #cve-2026-8772 Join the discussion	CVE Database V5	05/17/2026, 23:45:10 UTC Added: 05/17/2026, 23:51:38 UTC
CVE-2024-46382: n/aCVE-2024-46382 0 A SQL injection vulnerability in linlinjava litemall 1.8.0 allows a remote attacker to obtain sensitive information via the goodsId, goodsSn, and name parameters in AdminOrderController.java. MediumVulnerability#cve #cve-2024-46382 Join the discussion	CVE Database V5	09/19/2024, 00:00:00 UTC Added: 02/25/2026, 21:43:26 UTC
CVE-2024-24323: n/aCVE-2024-24323 0 SQL injection vulnerability in linlinjava litemall v.1.8.0 allows a remote attacker to obtain sensitive information via the nickname, consignee, orderSN, orderStatusArray parameters of the AdminOrdercontroller.java component. HighVulnerabilityChinaUnited StatesIndia+7#cve #cve-2024-24323 Join the discussion	CVE Database V5	02/27/2024, 00:00:00 UTC Added: 02/25/2026, 21:44:58 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional