Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

solvait

A security flaw has been discovered in Solvait version 24.4.2 that allows an attacker to elevate their privileges. By manipulating the Request ID and Action Type parameters in /AssignToMe/SetAction, an attacker can bypass approval workflows leading to unauthorized access to sensitive information or approval of fraudulent requests.

CVE-2024-45919 is a security vulnerability identified in Solvait version 24.4.2 that allows an attacker to elevate privileges by exploiting insufficient authorization controls. Specifically, the vulnerability exists in the /AssignToMe/SetAction endpoint, where the Request ID and Action Type parameters can be manipulated to bypass established approval workflows. This bypass enables attackers to perform actions typically restricted to authorized users, such as approving requests fraudulently or accessing sensitive information. The root cause is a failure to properly validate user permissions before processing these parameters, classified under CWE-269 (Improper Privilege Management). The vulnerability is remotely exploitable over the network without requiring authentication or user interaction, as indicated by the CVSS vector (AV:N/AC:L/PR:N/UI:N). The CVSS base score of 6.5 reflects a medium severity level, with impacts on confidentiality and integrity but no direct availability impact. Although no public exploits have been reported yet, the ease of exploitation and the critical nature of approval workflows make this a significant concern for organizations relying on Solvait for sensitive operations. The lack of available patches at the time of disclosure necessitates immediate attention to alternative mitigation strategies.

Detailed information about CVE-2024-45919: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-45919: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-45919: n/a

Solvait

A Stored Cross-Site Scripting (XSS) vulnerability in Solvait 24.4.2 allows remote attackers to inject malicious scripts into the application. This issue arises due to insufficient input validation and sanitization in "Intrest" feature.

CVE-2024-45920 is a Stored Cross-Site Scripting (XSS) vulnerability identified in Solvait version 24.4.2, specifically within the 'Intrest' feature. This vulnerability arises from inadequate input validation and sanitization, allowing attackers to inject malicious JavaScript code that is stored and later executed in the context of other users accessing the affected application. The vulnerability is classified under CWE-79, which covers improper neutralization of input during web page generation. The CVSS v3.1 base score is 5.4, indicating a medium severity level. The vector string (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) shows that the attack can be performed remotely over the network with low attack complexity, requires privileges (PR:L) and user interaction (UI:R), and results in a changed scope (S:C) with limited confidentiality and integrity impacts but no availability impact. The vulnerability can be exploited by authenticated users who interact with the vulnerable feature, injecting scripts that execute when other users view the affected content. This can lead to session hijacking, unauthorized actions, or data exposure within the application context. No patches or known exploits are currently available, but the risk remains significant due to the potential for lateral movement and data compromise within affected organizations.

Detailed information about CVE-2024-45920: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-45920: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-45920: n/a

An information disclosure vulnerability in the /Letter/PrintQr/ endpoint of Solvait v24.4.2 allows attackers to access sensitive data via a crafted request.

CVE-2024-44860 is a high-severity information disclosure vulnerability identified in the /Letter/PrintQr/ endpoint of Solvait version 24.4.2. The vulnerability arises from insufficient access control mechanisms (CWE-284) on this specific API endpoint, which allows attackers to craft requests that bypass authentication and retrieve sensitive data. The vulnerability is remotely exploitable over the network without any privileges or user interaction, as indicated by the CVSS vector AV:N/AC:L/PR:N/UI:N. The impact is limited to confidentiality, with no direct effect on integrity or availability. Although the affected versions are not explicitly enumerated beyond 24.4.2, the vulnerability likely affects deployments running this version. No patches or mitigations have been officially released yet, and there are no known active exploits in the wild. The vulnerability was reserved in August 2024 and published in late September 2024. The lack of authentication on the endpoint suggests a design flaw in access control enforcement, potentially exposing sensitive business or user data handled by the PrintQr functionality. Organizations relying on Solvait should conduct immediate risk assessments and implement compensating controls to prevent unauthorized access.

Detailed information about CVE-2024-44860: n/a. Get real-time updates, technical details, and mitigation strategies.


CVE-2024-45919: n/aCVE-2024-45919 0 A security flaw has been discovered in Solvait version 24.4.2 that allows an attacker to elevate their privileges. By manipulating the Request ID and Action Type parameters in /AssignToMe/SetAction, an attacker can bypass approval workflows leading to unauthorized access to sensitive information or approval of fraudulent requests. MediumVulnerabilityUnited StatesGermanyUnited Kingdom+7#cve #cve-2024-45919 Join the discussion	CVE Database V5	10/07/2024, 00:00:00 UTC Added: 02/25/2026, 21:43:15 UTC
CVE-2024-45920: n/aCVE-2024-45920 0 A Stored Cross-Site Scripting (XSS) vulnerability in Solvait 24.4.2 allows remote attackers to inject malicious scripts into the application. This issue arises due to insufficient input validation and sanitization in "Intrest" feature. MediumVulnerabilityUnited StatesGermanyUnited Kingdom+7#cve #cve-2024-45920 Join the discussion	CVE Database V5	09/30/2024, 00:00:00 UTC Added: 02/25/2026, 21:43:15 UTC
CVE-2024-44860: n/aCVE-2024-44860 0 An information disclosure vulnerability in the /Letter/PrintQr/ endpoint of Solvait v24.4.2 allows attackers to access sensitive data via a crafted request. HighVulnerabilityUnited StatesGermanyUnited Kingdom+7#cve #cve-2024-44860 Join the discussion	CVE Database V5	09/26/2024, 00:00:00 UTC Added: 02/25/2026, 21:43:02 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional