Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

SpagoBI

SpagoBI v3.5.1 contains multiple Stored Cross-Site Scripting (XSS) vulnerabilities in the create/edit forms of the worksheet designer function.

CVE-2024-54795 identifies multiple stored Cross-Site Scripting (XSS) vulnerabilities in SpagoBI version 3.5.1, specifically within the create and edit forms of the worksheet designer functionality. Stored XSS occurs when malicious scripts are injected into an application and persist in its data storage, later executed in the browsers of users who access the affected content. In this case, authenticated users with access to the worksheet designer can inadvertently or maliciously insert JavaScript code that will be stored and executed when other users view or interact with the affected worksheets. The CVSS 3.1 vector indicates the attack requires network access (AV:N), low attack complexity (AC:L), privileges (PR:L) meaning the attacker must be an authenticated user with some privileges, and user interaction (UI:R) is required for the exploit to succeed. The scope is changed (S:C), indicating the vulnerability affects resources beyond the initially vulnerable component. The impact on confidentiality and integrity is partial (C:L, I:L), while availability is not impacted (A:N). No public exploit code is currently known, and no official patches have been published, which suggests organizations must rely on mitigation strategies until a fix is available. The vulnerability is categorized under CWE-79, a common weakness related to improper neutralization of input during web page generation. This vulnerability could allow attackers to steal session tokens, perform actions on behalf of other users, or deface content within the BI platform, potentially leading to data leakage or manipulation of reports. Given the nature of SpagoBI as a business intelligence tool, such attacks could undermine trust in reporting accuracy and confidentiality of sensitive business data.

Detailed information about CVE-2024-54795: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-54795: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-54795: n/a

The script input feature of SpagoBI 3.5.1 allows arbitrary code execution.

CVE-2024-54794 is a critical vulnerability identified in SpagoBI version 3.5.1, a business intelligence platform widely used for data analytics and reporting. The flaw exists in the script input feature, which improperly sanitizes user-supplied input, leading to an arbitrary code execution vulnerability classified under CWE-77 (Improper Neutralization of Special Elements used in a Command). This vulnerability allows an attacker with high privileges (PR:H) to remotely execute arbitrary commands on the affected system without requiring user interaction (UI:N). The CVSS v3.1 base score of 9.1 reflects the vulnerability's critical nature, with network attack vector (AV:N), low attack complexity (AC:L), and a scope change (S:C) indicating that the exploit can affect resources beyond the initially vulnerable component. Exploitation could lead to full system compromise, including unauthorized disclosure, modification, or destruction of data, and disruption of service. Although no known exploits are currently in the wild, the vulnerability's characteristics make it a prime target for attackers once exploit code becomes available. The lack of available patches or updates at the time of publication increases the urgency for organizations to implement interim mitigations. Given SpagoBI's role in processing sensitive business data, exploitation could have severe consequences for confidentiality, integrity, and availability of organizational data and systems.

Detailed information about CVE-2024-54794: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-54794: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-54794: n/a

A Cross-Site Request Forgery (CSRF) vulnerability has been found in SpagoBI v3.5.1 in the user administration panel. An authenticated user can lead another user into executing unwanted actions inside the application they are logged in, like adding, editing or deleting users.

CVE-2024-54792 is a Cross-Site Request Forgery (CSRF) vulnerability identified in SpagoBI version 3.5.1, an open-source business intelligence suite widely used for data analytics and reporting. The vulnerability resides in the user administration panel, allowing an authenticated attacker to coerce another authenticated user into executing unwanted administrative actions such as adding, editing, or deleting user accounts. This attack exploits the lack of proper CSRF tokens or validation mechanisms in the user management interface. The attacker must first authenticate to the application and then trick the victim into visiting a crafted malicious webpage or link that issues unauthorized requests on their behalf. The CVSS 3.1 score of 6.1 reflects that the attack vector is network-based with low attack complexity, no privileges required, but requires user interaction. The scope is changed because the attack affects other users' accounts, impacting confidentiality and integrity by potentially altering user roles or access rights. There is no impact on availability. No patches or official fixes have been released at the time of publication, and no known exploits are reported in the wild. The vulnerability is classified under CWE-352, which covers CSRF weaknesses. Organizations using SpagoBI 3.5.1 should prioritize mitigating this vulnerability to prevent unauthorized privilege escalation or user management manipulation.

Detailed information about CVE-2024-54792: n/a. Get real-time updates, technical details, and mitigation strategies.


CVE-2024-54795: n/aCVE-2024-54795 0 SpagoBI v3.5.1 contains multiple Stored Cross-Site Scripting (XSS) vulnerabilities in the create/edit forms of the worksheet designer function. MediumVulnerabilityGermanyFranceItaly+3#cve #cve-2024-54795 Join the discussion	CVE Database V5	01/21/2025, 00:00:00 UTC Added: 10/17/2025, 15:31:59 UTC
CVE-2024-54794: n/aCVE-2024-54794 0 The script input feature of SpagoBI 3.5.1 allows arbitrary code execution. CriticalVulnerabilityGermanyFranceUnited Kingdom+5#cve #cve-2024-54794 Join the discussion	CVE Database V5	01/21/2025, 00:00:00 UTC Added: 10/17/2025, 15:31:59 UTC
CVE-2024-54792: n/aCVE-2024-54792 0 A Cross-Site Request Forgery (CSRF) vulnerability has been found in SpagoBI v3.5.1 in the user administration panel. An authenticated user can lead another user into executing unwanted actions inside the application they are logged in, like adding, editing or deleting users. MediumVulnerabilityGermanyFranceUnited Kingdom+5#cve #cve-2024-54792 Join the discussion	CVE Database V5	01/21/2025, 00:00:00 UTC Added: 10/17/2025, 15:31:59 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional