Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Zero Day Initiative

Cisco Talos

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

FOSS-Online

User enumeration vulnerability in ORDAT FOSS-Online before v2.24.01 allows attackers to determine if an account exists in the application by comparing the server responses of the forgot password functionality.

CVE-2024-34336 describes a user enumeration vulnerability in ORDAT FOSS-Online before version 2.24.01. Attackers can exploit differences in server responses during the forgot password process to confirm the existence of user accounts. This vulnerability is classified under CWE-204 (Information Exposure Through Discrepancy). The CVSS 3.1 base score is 5.3, reflecting a network attack vector with low complexity, no privileges required, and no user interaction needed. Confidentiality impact is low, with no impact on integrity or availability.

Detailed information about CVE-2024-34336: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-34336: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-34336: n/a

foss-online

ORDAT FOSS-Online before version 2.24.01 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the login page.

CVE-2024-34335 identifies a reflected cross-site scripting (XSS) vulnerability in ORDAT FOSS-Online prior to version 2.24.01. The vulnerability exists on the login page, where user-supplied input is not properly sanitized, allowing attackers to inject and execute arbitrary scripts in the victim's browser. The CVSS 3.1 vector indicates the attack can be performed remotely over the network with low attack complexity and no privileges required, but requires user interaction. The vulnerability impacts confidentiality and integrity but not availability. There is no vendor advisory or patch information provided, so patch status is unknown.

Detailed information about CVE-2024-34335: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-34335: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-34335: n/a

ORDAT FOSS-Online before v2.24.01 was discovered to contain a SQL injection vulnerability via the forgot password function.

CVE-2024-34334 identifies a SQL injection vulnerability (CWE-89) in the forgot password function of ORDAT FOSS-Online before version 2.24.01. The vulnerability allows unauthenticated remote attackers to inject SQL commands, which can compromise the confidentiality of the system's data. The CVSS v3.1 base score is 9.3, reflecting network attack vector, low attack complexity, no privileges or user interaction required, with a scope change and high confidentiality impact but no integrity impact and low availability impact. No known exploits in the wild or vendor patch information are currently available.

Detailed information about CVE-2024-34334: n/a. Get real-time updates, technical details, and mitigation strategies.


CVE-2024-34336: n/aCVE-2024-34336 0 User enumeration vulnerability in ORDAT FOSS-Online before v2.24.01 allows attackers to determine if an account exists in the application by comparing the server responses of the forgot password functionality. MediumVulnerability#cve #cve-2024-34336 Join the discussion	CVE Database V5	09/12/2024, 00:00:00 UTC Added: 02/25/2026, 21:40:31 UTC
CVE-2024-34335: n/aCVE-2024-34335 0 ORDAT FOSS-Online before version 2.24.01 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the login page. MediumVulnerability#cve #cve-2024-34335 Join the discussion	CVE Database V5	09/12/2024, 00:00:00 UTC Added: 02/25/2026, 21:40:31 UTC
CVE-2024-34334: n/aCVE-2024-34334 0 ORDAT FOSS-Online before v2.24.01 was discovered to contain a SQL injection vulnerability via the forgot password function. CriticalVulnerability#cve #cve-2024-34334 Join the discussion	CVE Database V5	09/12/2024, 00:00:00 UTC Added: 02/25/2026, 21:40:30 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional