Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

Threatpost

SecurityWeek

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

tidb

PingCAP TiDB v8.1.0 was discovered to contain a buffer overflow via the component (*Column).GetDecimal. This allows attackers to cause a Denial of Service (DoS) via a crafted input to the 'RemoveUnnecessaryFirstRow', it will check the expression between 'Agg' and 'GroupBy', but does not check the return type. NOTE: PingCAP disputes this, arguing that reproduction did not cause the security impact of service interruption to other users. They maintain it is a complex query bug in the product but not a DoS.

CVE-2024-41434 identifies a buffer overflow vulnerability in PingCAP TiDB version 8.1.0, specifically within the (*Column).GetDecimal method. This vulnerability arises when the 'RemoveUnnecessaryFirstRow' function processes crafted input that involves expressions between aggregation ('Agg') and grouping ('GroupBy') operations. The root cause is the lack of proper return type validation during this check, which can lead to memory corruption via a buffer overflow. Exploiting this flaw could cause the TiDB service to crash, resulting in a Denial of Service (DoS) condition. The vulnerability is classified under CWE-400, indicating a resource exhaustion or DoS issue. The CVSS 3.1 base score is 4.3 (medium), with an attack vector of network, low attack complexity, requiring privileges, no user interaction, and impacting availability only. PingCAP contests the severity, arguing that reproductions did not demonstrate service interruptions affecting other users, framing it as a complex query bug rather than a security flaw. No known exploits have been reported in the wild, and no official patches have been released at the time of publication. The vulnerability affects TiDB deployments that process complex SQL queries involving aggregation and grouping, particularly in environments where untrusted or malformed queries might be submitted.

Detailed information about CVE-2024-41434: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-41434: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-41434: n/a

PingCAP TiDB v8.1.0 was discovered to contain a buffer overflow via the component expression.ExplainExpressionList. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input. NOTE: PingCAP maintains that the actual reproduction of this issue did not cause the security impact of service interruption to other users. They argue that this is a complex query bug and not a DoS vulnerability.

CVE-2024-41433 identifies a critical buffer overflow vulnerability in PingCAP TiDB version 8.1.0, located within the expression.ExplainExpressionList component. Buffer overflow vulnerabilities occur when a program writes more data to a buffer than it can hold, potentially overwriting adjacent memory, leading to crashes, arbitrary code execution, or data corruption. In this case, the vulnerability allows an unauthenticated remote attacker to submit specially crafted queries that trigger the overflow, causing a Denial of Service (DoS) by crashing the database service. The vulnerability is classified under CWE-120, a well-known category of memory safety errors. The CVSS v3.1 score of 9.8 reflects the vulnerability's ease of exploitation (no privileges or user interaction required), network attack vector, and its impact on confidentiality, integrity, and availability. Although PingCAP argues that reproducing the issue does not cause service interruption to other users and considers it a complex query bug rather than a DoS, the potential for service disruption remains significant. No public exploits have been reported yet, but the critical severity demands urgent attention. The lack of a patch link suggests that a fix may not yet be publicly available, emphasizing the need for defensive measures. This vulnerability affects organizations deploying TiDB 8.1.0, a distributed SQL database popular in cloud-native and large-scale data environments.

Detailed information about CVE-2024-41433: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-41433: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-41433: n/a


CVE-2024-41434: n/aCVE-2024-41434 0 PingCAP TiDB v8.1.0 was discovered to contain a buffer overflow via the component (*Column).GetDecimal. This allows attackers to cause a Denial of Service (DoS) via a crafted input to the 'RemoveUnnecessaryFirstRow', it will check the expression between 'Agg' and 'GroupBy', but does not check the return type. NOTE: PingCAP disputes this, arguing that reproduction did not cause the security impact of service interruption to other users. They maintain it is a complex query bug in the product but not a DoS. MediumVulnerabilityUnited StatesChinaGermany+7#cve #cve-2024-41434 Join the discussion	CVE Database V5	09/03/2024, 00:00:00 UTC Added: 02/25/2026, 21:42:16 UTC
CVE-2024-41433: n/aCVE-2024-41433 0 PingCAP TiDB v8.1.0 was discovered to contain a buffer overflow via the component expression.ExplainExpressionList. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input. NOTE: PingCAP maintains that the actual reproduction of this issue did not cause the security impact of service interruption to other users. They argue that this is a complex query bug and not a DoS vulnerability. CriticalVulnerabilityUnited StatesChinaGermany+7#cve #cve-2024-41433 Join the discussion	CVE Database V5	09/03/2024, 00:00:00 UTC Added: 02/25/2026, 21:42:15 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional