Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

openair-cn5g-amf

Stack-based memcpy buffer overflow in the ngap_handle_pdu_session_resource_setup_response routine in OpenAirInterface CN5G AMF <= 2.0.0 allows a remote attacker with access to the N2 interface to carry out denial of service against the AMF and potentially execute code by sending a PDU Session Resource Setup Response with a suffciently large FailedToSetupList IE.

CVE-2024-24450 is a stack-based buffer overflow vulnerability identified in the OpenAirInterface CN5G Access and Mobility Management Function (AMF) software, versions up to and including 2.0.0. The flaw exists in the ngap_handle_pdu_session_resource_setup_response routine, which processes PDU Session Resource Setup Response messages received over the N2 interface. Specifically, the vulnerability arises when the FailedToSetupList Information Element (IE) within the response message is crafted with a size larger than expected, causing a memcpy operation to overflow a stack buffer. This overflow can lead to memory corruption, resulting in denial of service conditions by crashing the AMF or, in some cases, enabling remote code execution. Exploitation requires the attacker to have network-level access to the N2 interface, which connects the AMF to the RAN (Radio Access Network). The attack complexity is high due to the need to craft precise malformed messages, but no user interaction is required. The vulnerability is classified under CWE-120 (Classic Buffer Overflow). The CVSS v3.1 base score is 5.3, reflecting a medium severity primarily due to the availability impact and the requirement for some privileges and high attack complexity. No patches or known exploits are currently reported, but the vulnerability poses a significant risk to 5G core network infrastructure relying on OpenAirInterface CN5G AMF.

Detailed information about CVE-2024-24450: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-24450: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-24450: n/a

An uninitialized pointer dereference in the NasPdu::NasPdu component of OpenAirInterface CN5G AMF up to v2.0.0 allows attackers to cause a Denial of Service (DoS) via a crafted InitialUEMessage message sent to the AMF.

CVE-2024-24449 is a vulnerability identified in the OpenAirInterface CN5G Access and Mobility Management Function (AMF) up to version 2.0.0. The flaw resides in the NasPdu::NasPdu component, where an uninitialized pointer dereference occurs when processing a crafted InitialUEMessage. This message is part of the 5G core network signaling used during user equipment (UE) registration and connection setup. An attacker can exploit this by sending a specially crafted InitialUEMessage to the AMF, causing the system to dereference an uninitialized pointer, which leads to a crash or service disruption, effectively a Denial of Service (DoS). The vulnerability is classified under CWE-824 (Access of Uninitialized Pointer), indicating a programming error that can cause unpredictable behavior. The CVSS v3.1 score of 6.5 reflects a medium severity, with network attack vector, low attack complexity, no privileges required, but requiring user interaction (sending the crafted message). The impact is limited to availability, with no direct confidentiality or integrity compromise. No patches or exploits are currently publicly available, but the vulnerability is published and should be addressed promptly. This vulnerability affects operators and vendors deploying OpenAirInterface CN5G AMF in their 5G core infrastructure, potentially disrupting mobile network services.

Detailed information about CVE-2024-24449: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-24449: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-24449: n/a

An uninitialized pointer dereference in OpenAirInterface CN5G AMF up to v2.0.0 allows attackers to cause a Denial of Service (DoS) via a crafted InitialContextSetupResponse message sent to the AMF.

CVE-2024-24446 identifies a vulnerability in the OpenAirInterface CN5G Access and Mobility Management Function (AMF) component, specifically up to version 2.0.0. The flaw arises from an uninitialized pointer dereference, a type of programming error where a pointer variable is used before it has been assigned a valid memory address. This can cause the AMF process to crash or behave unpredictably when processing a crafted InitialContextSetupResponse message, which is part of the 5G core network signaling protocol. The AMF is a critical network function responsible for managing connection and mobility for 5G user equipment. An attacker can exploit this vulnerability remotely without authentication by sending a maliciously crafted message, causing a denial of service (DoS) by crashing or destabilizing the AMF. The vulnerability does not affect confidentiality or integrity but impacts availability, potentially disrupting 5G network services. The CVSS score of 6.5 reflects the medium severity, with attack vector being network-based, low attack complexity, no privileges required, but requiring user interaction in the form of message processing. No known public exploits or patches are currently available, and the vulnerability is tracked under CWE-476 (NULL Pointer Dereference).

Detailed information about CVE-2024-24446: n/a. Get real-time updates, technical details, and mitigation strategies.


CVE-2024-24450: n/aCVE-2024-24450 0 Stack-based memcpy buffer overflow in the ngap_handle_pdu_session_resource_setup_response routine in OpenAirInterface CN5G AMF <= 2.0.0 allows a remote attacker with access to the N2 interface to carry out denial of service against the AMF and potentially execute code by sending a PDU Session Resource Setup Response with a suffciently large FailedToSetupList IE. MediumVulnerabilityUnited StatesChinaSouth Korea+7#cve #cve-2024-24450 Join the discussion	CVE Database V5	11/15/2024, 00:00:00 UTC Added: 02/25/2026, 21:45:00 UTC
CVE-2024-24449: n/aCVE-2024-24449 0 An uninitialized pointer dereference in the NasPdu::NasPdu component of OpenAirInterface CN5G AMF up to v2.0.0 allows attackers to cause a Denial of Service (DoS) via a crafted InitialUEMessage message sent to the AMF. MediumVulnerabilityUnited StatesGermanySouth Korea+10#cve #cve-2024-24449 Join the discussion	CVE Database V5	11/15/2024, 00:00:00 UTC Added: 02/25/2026, 21:45:00 UTC
CVE-2024-24446: n/aCVE-2024-24446 0 An uninitialized pointer dereference in OpenAirInterface CN5G AMF up to v2.0.0 allows attackers to cause a Denial of Service (DoS) via a crafted InitialContextSetupResponse message sent to the AMF. MediumVulnerabilityUnited StatesGermanyFrance+7#cve #cve-2024-24446 Join the discussion	CVE Database V5	11/15/2024, 00:00:00 UTC Added: 02/25/2026, 21:45:00 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional