Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

AlienVault OTX General

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit NetSec

Reddit Cybersecurity

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

sparkshop

SparkShop <=1.1.7 is vulnerable to server-side request forgery (SSRF). This vulnerability allows attacks to scan ports on the Intranet or local network where the server resides, attack applications running on the Intranet or local network, or read metadata on the cloud server.

CVE-2024-48107 identifies a server-side request forgery (SSRF) vulnerability in SparkShop versions up to 1.1.7. SSRF vulnerabilities occur when an attacker can manipulate a server to make HTTP requests to arbitrary domains, including internal network resources or cloud metadata endpoints, which are normally inaccessible externally. In this case, the vulnerability enables attackers to scan ports on the intranet or local network where the SparkShop server is hosted, potentially identifying other vulnerable services or systems. Additionally, attackers can target applications running on the internal network or retrieve sensitive metadata from cloud provider services, such as AWS EC2 instance metadata, which may contain credentials or configuration data. The vulnerability does not require authentication or user interaction, increasing its risk profile. The CVSS vector (AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) indicates the attack is network-based with low complexity, no privileges or user interaction needed, and results in high confidentiality impact without affecting integrity or availability. While no public exploits have been reported, the lack of patches or mitigation guidance in the provided data suggests organizations should proactively address this issue. The vulnerability is classified under CWE-918, which covers SSRF weaknesses. Given the nature of SSRF, attackers can leverage this flaw for reconnaissance and lateral movement within internal networks or cloud environments, potentially leading to further compromise.

Detailed information about CVE-2024-48107: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-48107: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-48107: n/a

A loop hole in the payment logic of Sparkshop v1.16 allows attackers to arbitrarily modify the number of products.

CVE-2024-46307 is a high-severity vulnerability in Sparkshop v1.16 where a loophole in the payment logic permits attackers to arbitrarily alter the quantity of products during a transaction. The vulnerability has a CVSS 3.1 base score of 7.5, indicating network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality impact, high integrity impact, and no availability impact. This corresponds to CWE-841 (Improper Control of a Resource Through its Lifetime). No patch or official remediation has been provided as of the published date.

Detailed information about CVE-2024-46307: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-46307: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-46307: n/a

Sparkshop

File Upload vulnerability in Nanjin Xingyuantu Technology Co Sparkshop (Spark Mall B2C Mall v.1.1.6 and before allows a remote attacker to execute arbitrary code via the contorller/common.php component.

CVE-2024-40425 is a critical security vulnerability identified in the Sparkshop (Spark Mall B2C Mall) software developed by Nanjin Xingyuantu Technology Co, specifically affecting version 1.1.6 and earlier. The vulnerability is categorized as CWE-434, which pertains to unrestricted file upload flaws. It resides in the contorller/common.php component of the application, where insufficient validation or sanitization of uploaded files allows a remote attacker to upload malicious files. Because the vulnerability requires no authentication (PR:N) and no user interaction (UI:N), an attacker can exploit it remotely over the network (AV:N) with low attack complexity (AC:L). Upon successful exploitation, the attacker can execute arbitrary code on the server, leading to full compromise of the affected system’s confidentiality, integrity, and availability. The CVSS v3.1 base score of 9.8 reflects the critical nature of this vulnerability. Although no public exploits have been reported yet, the ease of exploitation and potential damage make it a high priority for remediation. The vulnerability affects e-commerce platforms that rely on Sparkshop, which may be deployed in various organizations globally, especially those in retail and online commerce sectors. The lack of available patches at the time of disclosure increases the urgency for organizations to implement interim mitigations and monitor their environments closely.

Detailed information about CVE-2024-40425: n/a. Get real-time updates, technical details, and mitigation strategies.


CVE-2024-48107: n/aCVE-2024-48107 0 SparkShop <=1.1.7 is vulnerable to server-side request forgery (SSRF). This vulnerability allows attacks to scan ports on the Intranet or local network where the server resides, attack applications running on the Intranet or local network, or read metadata on the cloud server. MediumVulnerabilityUnited StatesGermanyUnited Kingdom+7#cve #cve-2024-48107 Join the discussion	CVE Database V5	10/28/2024, 00:00:00 UTC Added: 02/25/2026, 21:43:39 UTC
CVE-2024-46307: n/aCVE-2024-46307 0 A loop hole in the payment logic of Sparkshop v1.16 allows attackers to arbitrarily modify the number of products. HighVulnerability#cve #cve-2024-46307 Join the discussion	CVE Database V5	10/09/2024, 00:00:00 UTC Added: 02/25/2026, 21:43:24 UTC
CVE-2024-40425: n/aCVE-2024-40425 0 File Upload vulnerability in Nanjin Xingyuantu Technology Co Sparkshop (Spark Mall B2C Mall v.1.1.6 and before allows a remote attacker to execute arbitrary code via the contorller/common.php component. CriticalVulnerabilityChinaUnited StatesIndia+7#cve #cve-2024-40425 Join the discussion	CVE Database V5	07/16/2024, 00:00:00 UTC Added: 02/25/2026, 21:42:01 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional