Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

oqtane.framework

Oqtane Framework 6.0.0 is vulnerable to Incorrect Access Control. By manipulating the entityid parameter, attackers can bypass passcode validation and successfully log into the application or access restricted data without proper authorization. The lack of server-side validation exacerbates the issue, as the application relies on client-side information for authentication.

CVE-2024-55470 identifies a critical incorrect access control vulnerability in the Oqtane Framework version 6.0.0. The vulnerability arises because the application improperly trusts client-side information for authentication, specifically the entityid parameter, which can be manipulated by attackers. By altering this parameter, an attacker can bypass the passcode validation mechanism, effectively logging into the application or accessing restricted data without proper authorization. The absence of server-side validation means that the application does not verify the legitimacy of the entityid or the authentication state, allowing unauthorized access. This flaw is categorized under CWE-290 (Authentication Bypass by Spoofing). The vulnerability is remotely exploitable without requiring any privileges or user interaction, increasing its risk profile. The CVSS v3.1 base score is 7.5, reflecting high impact on confidentiality with no impact on integrity or availability. No patches or known exploits have been reported at the time of publication, but the vulnerability represents a significant security risk for any deployment of Oqtane Framework 6.0.0, especially in environments handling sensitive data or requiring strict access controls.

Detailed information about CVE-2024-55470: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-55470: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-55470: n/a

An IDOR (Insecure Direct Object Reference) vulnerability exists in oqtane Framework 6.0.0, allowing a logged-in user to access inbox messages of other users by manipulating the notification ID in the request URL. By changing the notification ID, an attacker can view sensitive mail details belonging to other users.

CVE-2024-55186 identifies an Insecure Direct Object Reference (IDOR) vulnerability in the oqtane Framework version 6.0.0. The vulnerability arises because the application fails to properly verify that the logged-in user is authorized to access the inbox messages identified by the notification ID parameter in the request URL. By manipulating this notification ID, an authenticated attacker can access inbox messages belonging to other users, exposing potentially sensitive information. This flaw is categorized under CWE-639, which relates to authorization bypass through improper validation of object references. The vulnerability does not require user interaction beyond sending crafted requests and has a low attack complexity, but it does require the attacker to have valid credentials (privileged or non-privileged user). The CVSS v3.1 vector indicates network attack vector (AV:N), low attack complexity (AC:L), privileges required (PR:L), no user interaction (UI:N), unchanged scope (S:U), and impacts confidentiality only (C:L), with no impact on integrity or availability. There are no known public exploits or patches available at the time of publication, emphasizing the need for proactive mitigation. This vulnerability can be exploited remotely over the network by any authenticated user, making it a significant concern for organizations relying on the oqtane Framework for web applications that handle sensitive messaging or notification data.

Detailed information about CVE-2024-55186: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-55186: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-55186: n/a


CVE-2024-55470: n/aCVE-2024-55470 0 Oqtane Framework 6.0.0 is vulnerable to Incorrect Access Control. By manipulating the entityid parameter, attackers can bypass passcode validation and successfully log into the application or access restricted data without proper authorization. The lack of server-side validation exacerbates the issue, as the application relies on client-side information for authentication. HighVulnerabilityUnited StatesGermanyUnited Kingdom+7#cve #cve-2024-55470 Join the discussion	CVE Database V5	12/20/2024, 00:00:00 UTC Added: 02/25/2026, 21:38:22 UTC
CVE-2024-55186: n/aCVE-2024-55186 0 An IDOR (Insecure Direct Object Reference) vulnerability exists in oqtane Framework 6.0.0, allowing a logged-in user to access inbox messages of other users by manipulating the notification ID in the request URL. By changing the notification ID, an attacker can view sensitive mail details belonging to other users. MediumVulnerabilityUnited StatesGermanyUnited Kingdom+7#cve #cve-2024-55186 Join the discussion	CVE Database V5	12/20/2024, 00:00:00 UTC Added: 02/25/2026, 21:38:20 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional