Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Tmall_demo

Tmall_demo before v2024.07.03 was discovered to contain a SQL injection vulnerability.

CVE-2024-40560 identifies a SQL injection vulnerability in the Tmall_demo application versions before 2024.07.03. SQL injection (CWE-89) occurs when user-supplied input is improperly sanitized and directly incorporated into SQL queries, allowing attackers to manipulate the database queries executed by the application. This vulnerability is remotely exploitable over the network without requiring authentication or user interaction, as indicated by the CVSS vector (AV:N/AC:L/PR:N/UI:N). The impact includes unauthorized disclosure of sensitive data, modification or deletion of database records, and potential disruption of service. Although no known exploits have been reported in the wild, the vulnerability's high CVSS score (7.3) reflects its serious nature. The absence of available patches at the time of publication necessitates immediate attention from organizations using Tmall_demo. Mitigations should focus on input validation, use of parameterized queries or prepared statements, and monitoring for suspicious database activity. Given Tmall_demo's role in e-commerce or demo environments, exploitation could lead to significant business and reputational damage.

Detailed information about CVE-2024-40560: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-40560: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-40560: n/a

Tmall_demo v2024.07.03 was discovered to contain an arbitrary file upload vulnerability.

CVE-2024-40555 identifies an arbitrary file upload vulnerability in the Tmall_demo software version 2024.07.03. Arbitrary file upload vulnerabilities occur when an application improperly restricts the types or contents of files that users can upload, allowing attackers to upload malicious files such as web shells or scripts. This vulnerability is remotely exploitable without requiring authentication or user interaction, as indicated by the CVSS vector (AV:N/AC:L/PR:N/UI:N). The vulnerability impacts the integrity of the system by enabling unauthorized modification or addition of files, which could lead to further compromise such as remote code execution or persistent backdoors if the uploaded files are executed by the server. The CVSS score of 5.3 reflects a medium severity, primarily due to the lack of confidentiality or availability impact and the absence of known exploits in the wild. The lack of detailed affected version information and absence of published patches suggest that the vulnerability disclosure is recent and mitigation guidance is pending. Organizations using Tmall_demo should be aware of this risk and prepare to apply vendor patches once available. In the meantime, implementing strict input validation, file type restrictions, and monitoring file upload directories can reduce the attack surface. The vulnerability highlights the importance of secure file handling in web applications to prevent unauthorized file uploads that can compromise system integrity.

Detailed information about CVE-2024-40555: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-40555: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-40555: n/a

An access control issue in Tmall_demo v2024.07.03 allows attackers to obtain sensitive information.

CVE-2024-40554 identifies an access control vulnerability in the Tmall_demo software version 2024.07.03. The vulnerability allows attackers to remotely access sensitive information without authentication or user interaction, indicating a failure in enforcing proper access restrictions on protected resources. Classified under CWE-200 (Exposure of Sensitive Information), this flaw permits unauthorized disclosure of confidential data, potentially including user information, configuration details, or other critical assets managed by the application. The CVSS v3.1 score of 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) highlights that the attack vector is network-based, requires no privileges or user interaction, and impacts confidentiality severely while leaving integrity and availability unaffected. No patches or official remediation guidance have been released as of the publication date, and no active exploitation has been observed in the wild. The vulnerability's root cause likely stems from improper access control checks or missing authorization logic in the application code, allowing direct access to sensitive endpoints or data stores. Given the nature of the flaw, attackers could leverage automated tools to extract confidential information remotely, posing a significant risk to organizations relying on this software for critical operations.

Detailed information about CVE-2024-40554: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-40554: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-40554: n/a

Tmall_demo v2024.07.03 was discovered to contain an arbitrary file upload via the component uploadUserHeadImage.

CVE-2024-40553 identifies an arbitrary file upload vulnerability in the Tmall_demo application, specifically within the uploadUserHeadImage component. This flaw allows authenticated users with high privileges to upload files without sufficient validation or sanitization, violating secure file upload best practices (CWE-434). The vulnerability does not require user interaction but does require authentication with elevated privileges, which limits the attack surface to insiders or compromised accounts. The CVSS 3.1 vector (AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N) indicates network attack vector, low attack complexity, high privilege requirement, no user interaction, unchanged scope, no confidentiality impact, high integrity impact, and no availability impact. The absence of known exploits in the wild suggests it is either newly discovered or not yet weaponized. However, arbitrary file upload vulnerabilities can lead to serious consequences such as remote code execution, defacement, or further system compromise if attackers manage to upload malicious scripts or binaries. The lack of patch links implies that a fix may not yet be publicly available, increasing the urgency for organizations to implement compensating controls. Given the nature of the vulnerability, it is critical to review authentication controls, file upload restrictions, and monitoring for suspicious file activity within affected deployments.

Detailed information about CVE-2024-40553: n/a. Get real-time updates, technical details, and mitigation strategies.


CVE-2024-40560: n/aCVE-2024-40560 0 Tmall_demo before v2024.07.03 was discovered to contain a SQL injection vulnerability. HighVulnerabilityChinaUnited StatesIndia+7#cve #cve-2024-40560 Join the discussion	CVE Database V5	07/15/2024, 00:00:00 UTC Added: 02/25/2026, 21:42:07 UTC
CVE-2024-40555: n/aCVE-2024-40555 0 Tmall_demo v2024.07.03 was discovered to contain an arbitrary file upload vulnerability. MediumVulnerabilityChinaUnited StatesIndia+7#cve #cve-2024-40555 Join the discussion	CVE Database V5	07/15/2024, 00:00:00 UTC Added: 02/25/2026, 21:42:07 UTC
CVE-2024-40554: n/aCVE-2024-40554 0 An access control issue in Tmall_demo v2024.07.03 allows attackers to obtain sensitive information. HighVulnerabilityChinaUnited StatesIndia+7#cve #cve-2024-40554 Join the discussion	CVE Database V5	07/15/2024, 00:00:00 UTC Added: 02/25/2026, 21:42:07 UTC
CVE-2024-40553: n/aCVE-2024-40553 0 Tmall_demo v2024.07.03 was discovered to contain an arbitrary file upload via the component uploadUserHeadImage. MediumVulnerabilityChinaUnited StatesIndia+6#cve #cve-2024-40553 Join the discussion	CVE Database V5	07/15/2024, 00:00:00 UTC Added: 02/25/2026, 21:42:05 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional