Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

pretix

The "quick setup" view presented to users after they first create an 
event allows to set up the most critical parts of an event in just a few
 clicks. This view did not properly check that the user has permission 
to change configuration for the given event. An attacker could use a 
well-timed request to create products, quotas, set bank transfer 
configuration, or connect a stripe account to an event they do not have 
access to.

The vulnerability in pretix's "quick setup" view arises from insufficient authorization checks when users configure newly created events. Specifically, the system fails to verify that the user has permission to modify the event configuration, allowing an attacker with limited privileges to execute unauthorized changes such as creating products, quotas, setting bank transfer configurations, or linking Stripe accounts to events they do not own. This is an authorization bypass issue categorized under CWE-639. The affected versions are 2026.5.0 and 2026.6.0. No official patch or remediation guidance is currently provided by the vendor, and no known exploits are reported in the wild.

Detailed information about CVE-2026-18028: CWE-639 Authorization bypass through User-Controlled key in pretix GmbH pretix affecting pretix GmbH pretix. Get real

CVE-2026-18028: CWE-639 Authorization bypass through User-Controlled key in pretix GmbH pretix - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-18028: CWE-639 Authorization bypass through User-Controlled key in pretix GmbH pretix

pretix before 2024.1.1 mishandles file validation.

CVE-2024-27447 is a critical vulnerability identified in pretix, an open-source event ticketing platform, affecting versions prior to 2024.1.1. The root cause is improper file validation, classified under CWE-20 (Improper Input Validation), which allows attackers to submit crafted files that bypass security checks. This flaw can be exploited remotely without any authentication or user interaction, making it highly accessible to attackers. The vulnerability impacts the confidentiality, integrity, and availability of the affected systems, as attackers can potentially execute arbitrary code, manipulate data, or cause denial of service. The CVSS v3.1 score of 9.8 reflects the critical nature, with attack vector being network (AV:N), low attack complexity (AC:L), no privileges required (PR:N), no user interaction (UI:N), and full impact on confidentiality, integrity, and availability (C:H/I:H/A:H). Although no public exploits are currently known, the ease of exploitation and critical impact necessitate urgent attention. Pretix is widely used by organizations managing ticket sales and event registrations, making this vulnerability a significant threat to event management infrastructure worldwide.

Detailed information about CVE-2024-27447: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-27447: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-27447: n/a


CVE-2026-18028: CWE-639 Authorization bypass through User-Controlled key in pretix GmbH pretixCVE-2026-18028 0 The "quick setup" view presented to users after they first create an event allows to set up the most critical parts of an event in just a few clicks. This view did not properly check that the user has permission to change configuration for the given event. An attacker could use a well-timed request to create products, quotas, set bank transfer configuration, or connect a stripe account to an event they do not have access to. LowVulnerability#cve #cve-2026-18028 #cwe-639 Join the discussion	CVE Database V5	07/28/2026, 10:39:48 UTC Added: 07/28/2026, 11:07:46 UTC
CVE-2024-27447: n/aCVE-2024-27447 0 pretix before 2024.1.1 mishandles file validation. CriticalVulnerabilityGermanyUnited StatesUnited Kingdom+7#cve #cve-2024-27447 Join the discussion	CVE Database V5	02/26/2024, 00:00:00 UTC Added: 02/25/2026, 21:45:33 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional