Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

openair-epc-fed

magma

Reachable assertions in the NGAP_FIND_PROTOCOLIE_BY_ID function of OpenAirInterface Magma v1.8.0 and OAI EPC Federation v1.2.0 allow attackers to cause a Denial of Service (DoS) via a crafted NGAP packet.

CVE-2024-24426 is a vulnerability identified in the NGAP_FIND_PROTOCOLIE_BY_ID function within OpenAirInterface Magma v1.8.0 and OAI EPC Federation v1.2.0. NGAP (Next Generation Application Protocol) is a critical protocol used in 5G core networks to manage signaling between the gNodeB (5G base station) and the Access and Mobility Management Function (AMF). The vulnerability stems from reachable assertions—programming checks that, when triggered by malformed input, cause the application to terminate unexpectedly. Specifically, crafted NGAP packets can cause these assertions to fail, leading to a denial of service condition by crashing the affected network function. The vulnerability does not require any privileges or user interaction, making it remotely exploitable by an unauthenticated attacker with network access to the affected components. The CVSS 3.1 base score of 7.5 indicates a high severity level, primarily due to the ease of exploitation (network vector, low complexity) and the impact on confidentiality (high), though integrity and availability impacts are not indicated by the CVSS vector. The CWE-78 tag suggests a possible command injection or improper input validation aspect, though the description focuses on assertion failures. No patches or known exploits are currently reported, but the vulnerability poses a significant risk to 5G core network stability and availability. OpenAirInterface and OAI EPC Federation are open-source implementations used by telecom operators and research institutions, making this vulnerability relevant to both commercial and experimental 5G deployments.

Detailed information about CVE-2024-24426: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-24426: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-24426: n/a

Magma v1.8.0 and OAI EPC Federation v1.20 were discovered to contain an out-of-bounds read in the amf_as_establish_req function at /tasks/amf/amf_as.cpp. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted NAS packet.

CVE-2024-24425 is a vulnerability identified in Magma version 1.8.0 and OAI EPC Federation version 1.20, both of which are open-source implementations of 5G core network components. The flaw exists in the amf_as_establish_req function located in the /tasks/amf/amf_as.cpp source file, where an out-of-bounds read occurs due to insufficient bounds checking when processing NAS (Non-Access Stratum) packets. Specifically, the vulnerability is classified under CWE-125 (Out-of-bounds Read), indicating that the software reads data outside the intended buffer boundaries, which can lead to undefined behavior. An attacker can exploit this vulnerability by sending a crafted NAS packet to the affected AMF (Access and Mobility Management Function) component, triggering a denial of service (DoS) condition by causing the process to crash or become unresponsive. The attack vector is network-based, requiring no privileges but some user interaction in the form of sending the malicious packet. The CVSS 3.1 base score is 6.5, indicating a medium severity level. No known exploits have been reported in the wild, and no official patches or fixes have been published at the time of disclosure. This vulnerability affects critical 5G core network infrastructure, potentially disrupting mobile network services that rely on these open-source platforms. The root cause is inadequate input validation and error handling in the NAS message processing code, which should be addressed by implementing proper bounds checks and robust parsing logic.

Detailed information about CVE-2024-24425: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-24425: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-24425: n/a


CVE-2024-24426: n/aCVE-2024-24426 0 Reachable assertions in the NGAP_FIND_PROTOCOLIE_BY_ID function of OpenAirInterface Magma v1.8.0 and OAI EPC Federation v1.2.0 allow attackers to cause a Denial of Service (DoS) via a crafted NGAP packet. HighVulnerabilityUnited StatesGermanySouth Korea+7#cve #cve-2024-24426 Join the discussion	CVE Database V5	11/15/2024, 00:00:00 UTC Added: 02/25/2026, 21:44:58 UTC
CVE-2024-24425: n/aCVE-2024-24425 0 Magma v1.8.0 and OAI EPC Federation v1.20 were discovered to contain an out-of-bounds read in the amf_as_establish_req function at /tasks/amf/amf_as.cpp. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted NAS packet. MediumVulnerabilityUnited StatesGermanyFrance+7#cve #cve-2024-24425 Join the discussion	CVE Database V5	11/15/2024, 00:00:00 UTC Added: 02/25/2026, 21:44:58 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional