Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

AlienVault OTX General

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit NetSec

Reddit Cybersecurity

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

phiola

An issue in phiola/src/afilter/conv.c:115 of phiola v2.0-rc22 allows a remote attacker to cause a denial of service via a crafted .wav file.

CVE-2024-33431 is a vulnerability identified in the open-source audio player and processing tool phiola, version 2.0-rc22. The flaw exists in the source file phiola/src/afilter/conv.c at line 115, which is part of the audio filter conversion logic handling .wav files. The vulnerability is classified under CWE-670 (Improper Resource Shutdown or Release), indicating that the application fails to properly manage resources when processing specially crafted .wav files. An attacker can exploit this by delivering a malicious .wav file that, when opened by phiola, causes the application to enter a denial of service state, likely through resource exhaustion or a crash. The CVSS v3.1 base score is 6.5 (medium severity), with an attack vector of network (remote), low attack complexity, no privileges required, but requiring user interaction (opening the file). The impact is limited to availability, with no confidentiality or integrity effects. No patches or known exploits are currently available, but the vulnerability is publicly disclosed as of May 1, 2024. This vulnerability highlights the risks of processing untrusted multimedia content without robust input validation and resource management.

Detailed information about CVE-2024-33431: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-33431: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-33431: n/a

An issue in phiola/src/afilter/pcm_convert.h:513 of phiola v2.0-rc22 allows a remote attacker to execute arbitrary code via the a crafted .wav file.

CVE-2024-33430 is a critical vulnerability identified in the open-source audio player and processing tool phiola, version 2.0-rc22. The flaw exists in the pcm_convert.h source file, specifically at line 513, where improper handling of input data from .wav files allows a remote attacker to execute arbitrary code. This vulnerability is classified under CWE-94 (Improper Control of Generation of Code) and CWE-482 (Incorrect Behavior), indicating that the software fails to properly validate or sanitize input, leading to code injection and unexpected execution flow. An attacker can craft a malicious .wav file that, when opened or processed by phiola, triggers this vulnerability, enabling them to run arbitrary code with the privileges of the user running the application. The attack vector is remote and network accessible (AV:N), requires low attack complexity (AC:L), no privileges (PR:N), but does require user interaction (UI:R) such as opening the malicious file. The vulnerability impacts confidentiality, integrity, and availability (all rated high), making it a critical concern. No patches or fixes have been publicly released yet, and no known exploits have been observed in the wild. However, the high CVSS score of 8.8 underscores the urgency for mitigation. This vulnerability poses a significant risk to any organization or individual using phiola for audio playback or processing, especially in environments where untrusted audio files may be handled.

Detailed information about CVE-2024-33430: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-33430: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-33430: n/a

Buffer-Overflow vulnerability at pcm_convert.h:513 of phiola v2.0-rc22 allows a remote attacker to execute arbitrary code via a crafted .wav file.

CVE-2024-33429 is a buffer overflow vulnerability identified in the pcm_convert.h source file at line 513 within phiola version 2.0-rc22, an audio player and converter software. This vulnerability arises from improper bounds checking during the processing of .wav audio files, allowing a remote attacker to craft a specially designed .wav file that triggers a buffer overflow condition. Exploitation of this flaw enables the attacker to execute arbitrary code on the target system with the privileges of the user running phiola. The CVSS 3.1 vector indicates the attack can be performed remotely (AV:N) with low complexity (AC:L), requiring low privileges (PR:L) but no user interaction (UI:N). The scope remains unchanged (S:U), with a low confidentiality impact (C:L), high integrity impact (I:H), and no availability impact (A:N). This suggests that while the attacker can modify or execute code, they gain limited access to confidential data and do not disrupt service availability. No patches or fixes are currently linked, and no exploits have been observed in the wild, indicating the vulnerability is newly disclosed. The underlying weakness corresponds to CWE-122, a classic heap-based buffer overflow, which is a common and dangerous software flaw. The vulnerability affects the audio decoding pipeline, a critical component for media applications using phiola, potentially compromising systems that process untrusted audio files.

Detailed information about CVE-2024-33429: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-33429: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-33429: n/a

Buffer-Overflow vulnerability at conv.c:68 of stsaz phiola v2.0-rc22 allows a remote attacker to execute arbitrary code via the a crafted .wav file.

CVE-2024-33428 is a buffer overflow vulnerability identified in the conv.c source file at line 68 within the stsaz phiola audio player version 2.0-rc22. This vulnerability arises due to improper bounds checking when processing .wav audio files, allowing a remote attacker to craft a specially designed .wav file that triggers a buffer overflow. When a user opens this malicious file with the vulnerable version of stsaz phiola, the overflow can overwrite memory, enabling the attacker to execute arbitrary code on the victim's system. The attack vector is remote and requires no privileges or authentication, but does require user interaction to open the malicious file. The vulnerability affects confidentiality, integrity, and availability, as arbitrary code execution can lead to data theft, system compromise, or denial of service. The CVSS v3.1 base score is 8.8, reflecting high severity with network attack vector, low attack complexity, no privileges required, user interaction needed, and full impact on confidentiality, integrity, and availability. Currently, there are no patches or fixes publicly available, and no known exploits have been observed in the wild. The vulnerability is classified under CWE-122 (Heap-based Buffer Overflow).

Detailed information about CVE-2024-33428: n/a. Get real-time updates, technical details, and mitigation strategies.


CVE-2024-33431: n/aCVE-2024-33431 0 An issue in phiola/src/afilter/conv.c:115 of phiola v2.0-rc22 allows a remote attacker to cause a denial of service via a crafted .wav file. MediumVulnerabilityUnited StatesGermanyJapan+7#cve #cve-2024-33431 Join the discussion	CVE Database V5	05/01/2024, 00:00:00 UTC Added: 02/25/2026, 21:40:18 UTC
CVE-2024-33430: n/aCVE-2024-33430 0 An issue in phiola/src/afilter/pcm_convert.h:513 of phiola v2.0-rc22 allows a remote attacker to execute arbitrary code via the a crafted .wav file. HighVulnerabilityUnited StatesGermanyFrance+7#cve #cve-2024-33430 Join the discussion	CVE Database V5	05/01/2024, 00:00:00 UTC Added: 02/25/2026, 21:40:18 UTC
CVE-2024-33429: n/aCVE-2024-33429 0 Buffer-Overflow vulnerability at pcm_convert.h:513 of phiola v2.0-rc22 allows a remote attacker to execute arbitrary code via a crafted .wav file. HighVulnerabilityUnited StatesGermanyJapan+7#cve #cve-2024-33429 Join the discussion	CVE Database V5	05/01/2024, 00:00:00 UTC Added: 02/25/2026, 21:40:18 UTC
CVE-2024-33428: n/aCVE-2024-33428 0 Buffer-Overflow vulnerability at conv.c:68 of stsaz phiola v2.0-rc22 allows a remote attacker to execute arbitrary code via the a crafted .wav file. HighVulnerabilityUnited StatesGermanyJapan+7#cve #cve-2024-33428 Join the discussion	CVE Database V5	05/01/2024, 00:00:00 UTC Added: 02/25/2026, 21:40:18 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional