Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

OpenSMTPD

ascii_load_sockaddr in smtpd in OpenBSD before 7.1 errata 024 and 7.2 before errata 020, and OpenSMTPD Portable before 7.0.0-portable commit f748277, can abort upon a connection from a local, scoped IPv6 address.

CVE-2023-29323 is a denial-of-service vulnerability affecting the smtpd daemon in OpenBSD and OpenSMTPD Portable. The issue lies in the ascii_load_sockaddr function, which improperly handles connections originating from local, scoped IPv6 addresses. When such a connection is received, the smtpd process can abort unexpectedly, causing a denial of service by terminating the mail server process handling SMTP requests. This vulnerability affects OpenBSD versions prior to 7.1 errata 024 and 7.2 before errata 020, as well as OpenSMTPD Portable versions before 7.0.0-portable commit f748277. The vulnerability does not require authentication or user interaction, as it can be triggered simply by establishing a connection from a specially crafted IPv6 local scoped address. No known exploits have been reported in the wild, but the flaw could be exploited by an attacker with network access to the SMTP server to disrupt mail services. The impact is primarily on availability, as the smtpd process aborts, potentially causing mail delivery interruptions. The lack of a CVSS score necessitates an assessment based on the nature of the flaw, which indicates a high severity due to the ease of triggering and the critical role of SMTP servers in organizational communications. The vulnerability is relevant to organizations using OpenBSD or OpenSMTPD for mail services, especially those supporting IPv6 traffic. Remediation involves applying the official errata updates for OpenBSD or upgrading OpenSMTPD Portable to a fixed commit version. Monitoring for unusual SMTP connection patterns from IPv6 scoped addresses can help detect exploitation attempts.

Detailed information about CVE-2023-29323: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2023-29323: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2023-29323: n/a

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional