Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

AlienVault OTX General

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit NetSec

Reddit Cybersecurity

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

User-Registration-&-Login-and-User-Management-System

Phpgurukul User Registration & Login and User Management System 3.2 is vulnerable to SQL Injection in /admin//search-result.php via the searchkey parameter.

CVE-2024-48283 identifies a critical SQL Injection vulnerability in the Phpgurukul User Registration & Login and User Management System version 3.2. The vulnerability is located in the /admin//search-result.php file, specifically through the 'searchkey' parameter, which is improperly sanitized. This allows remote attackers to inject malicious SQL queries directly into the backend database without any authentication or user interaction. The vulnerability is classified under CWE-89 (Improper Neutralization of Special Elements used in an SQL Command). The CVSS v3.1 base score is 9.8, reflecting the ease of exploitation (network vector, low attack complexity), no privileges required, and no user interaction needed. Successful exploitation can compromise the confidentiality, integrity, and availability of the database and potentially the entire system. Attackers could extract sensitive user data, modify or delete records, or escalate privileges. Although no public exploits are currently known, the critical nature and straightforward exploitation vector make this a high-risk vulnerability. No official patches have been released yet, increasing the urgency for organizations to implement mitigations.

Detailed information about CVE-2024-48283: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-48283: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-48283: n/a

A HTML Injection vulnerability was found in /search-result.php of PHPGurukul User Registration & Login and User Management System 3.2. This vulnerability allows remote attackers to execute arbitrary HTML code via the searchkey parameter in a POST HTTP request.

CVE-2024-48279 is an HTML Injection vulnerability identified in the /search-result.php file of PHPGurukul User Registration & Login and User Management System version 3.2. The vulnerability arises because the application fails to properly sanitize or encode user-supplied input in the searchkey parameter of a POST HTTP request. This allows remote attackers with low privileges to inject arbitrary HTML code into the web page output. The vulnerability is classified under CWE-94, which typically refers to improper control of code injection, though here it manifests as HTML Injection rather than script injection. The CVSS v3.1 score is 7.6 (high), reflecting network attack vector, low attack complexity, low privileges required, no user interaction needed, and high confidentiality impact with partial integrity and availability impacts. Exploiting this flaw could enable attackers to manipulate the rendered HTML content, potentially leading to phishing, UI redressing, or partial data exposure. While no public exploits are currently known, the vulnerability's characteristics make it a viable target for attackers aiming to compromise user trust or extract sensitive information from affected systems. The lack of available patches at the time of publication necessitates immediate attention from administrators to implement compensating controls.

Detailed information about CVE-2024-48279: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-48279: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-48279: n/a

Phpgurukul User Registration & Login and User Management System 3.2 is vulnerable to Cross Site Request Forgery (CSRF) via /edit-profile.php.

CVE-2024-48278 identifies a Cross Site Request Forgery (CSRF) vulnerability in the Phpgurukul User Registration & Login and User Management System version 3.2, specifically through the /edit-profile.php endpoint. CSRF vulnerabilities occur when a web application does not properly verify that requests modifying state originate from legitimate users, allowing attackers to craft malicious requests that execute with the victim’s privileges. In this case, an attacker can cause an authenticated user to unknowingly submit a request that alters their profile information, potentially leading to unauthorized changes in user data. The vulnerability requires the victim to be logged in (PR:L) and to perform some user interaction (UI:R), such as clicking a malicious link or visiting a crafted webpage. The attack vector is network-based (AV:N), meaning it can be exploited remotely over the internet. The vulnerability affects confidentiality, integrity, and availability to a limited degree (C:L/I:L/A:L), as unauthorized profile modifications could expose or corrupt user data and potentially disrupt user access. The CVSS 3.1 base score is 5.5, indicating a medium severity level. No patches or known exploits are currently available, highlighting the importance of proactive mitigation. The vulnerability is classified under CWE-352, which corresponds to CSRF issues. Given the nature of the system—a user registration and management platform—this vulnerability could be leveraged to undermine user trust and system integrity if exploited at scale.

Detailed information about CVE-2024-48278: n/a. Get real-time updates, technical details, and mitigation strategies.


CVE-2024-48283: n/aCVE-2024-48283 0 Phpgurukul User Registration & Login and User Management System 3.2 is vulnerable to SQL Injection in /admin//search-result.php via the searchkey parameter. CriticalVulnerabilityIndiaUnited StatesUnited Kingdom+7#cve #cve-2024-48283 Join the discussion	CVE Database V5	10/15/2024, 00:00:00 UTC Added: 02/25/2026, 21:43:45 UTC
CVE-2024-48279: n/aCVE-2024-48279 0 A HTML Injection vulnerability was found in /search-result.php of PHPGurukul User Registration & Login and User Management System 3.2. This vulnerability allows remote attackers to execute arbitrary HTML code via the searchkey parameter in a POST HTTP request. HighVulnerabilityIndiaPakistanBangladesh+7#cve #cve-2024-48279 Join the discussion	CVE Database V5	10/15/2024, 00:00:00 UTC Added: 02/25/2026, 21:43:45 UTC
CVE-2024-48278: n/aCVE-2024-48278 0 Phpgurukul User Registration & Login and User Management System 3.2 is vulnerable to Cross Site Request Forgery (CSRF) via /edit-profile.php. MediumVulnerabilityIndiaUnited StatesUnited Kingdom+7#cve #cve-2024-48278 Join the discussion	CVE Database V5	10/15/2024, 00:00:00 UTC Added: 02/25/2026, 21:43:45 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional