Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit NetSec

Reddit Cybersecurity

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

AWS Security Bulletins

GCP Kubernetes Security

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

testlink

TestLink 1.9.20 is vulnerable to Incorrect Access Control in the TestPlan editing section. When a new TestPlan is created, an ID with an incremental value is automatically generated. Using the edit function you can change the tplan_id parameter to another ID. The application does not carry out a check on the user's permissions maing it possible to recover the IDs of all the TestPlans (even the administrative ones) and modify them even with minimal privileges.

CVE-2024-46097 is an access control vulnerability identified in TestLink version 1.9.20, a widely used open-source test management tool. The issue arises in the TestPlan editing section, where each TestPlan is assigned an incremental identifier (tplan_id) upon creation. The vulnerability stems from the application's failure to verify user permissions when the tplan_id parameter is manipulated during edit operations. This lack of authorization checks allows users with minimal privileges to enumerate all TestPlan IDs, including those reserved for administrative use, and modify them arbitrarily. The vulnerability is classified under CWE-284 (Improper Access Control). The CVSS v3.1 base score is 8.1, reflecting high severity due to network exploitable attack vector, low attack complexity, and the requirement of only low privileges without user interaction. The impact includes unauthorized disclosure and modification of test plans, which can compromise the integrity of software testing processes and potentially lead to flawed software releases. Although no patches or known exploits are currently documented, the vulnerability presents a significant risk to organizations relying on TestLink for test management. The flaw can be exploited remotely over the network, making it critical to address promptly.

Detailed information about CVE-2024-46097: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-46097: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-46097: n/a

TestLink before v.1.9.20 is vulnerable to Cross Site Scripting (XSS) via the pop-up on upload file. When uploading a file, the XSS payload can be entered into the file name.

CVE-2024-42906 is a Cross Site Scripting (XSS) vulnerability identified in TestLink, an open-source test management tool widely used for software quality assurance. The vulnerability exists in versions prior to 1.9.20 and is triggered via the file upload pop-up interface. Specifically, when a user uploads a file, the file name input is not properly sanitized or encoded, allowing an attacker to inject malicious JavaScript code. This injected script executes in the context of the victim's browser when the file upload pop-up is rendered, potentially enabling session hijacking, theft of sensitive information, or manipulation of the user interface. The vulnerability has a CVSS v3.1 base score of 4.1, indicating medium severity. The attack vector is physical or remote (AV:P), with low attack complexity (AC:L), no privileges required (PR:N), but user interaction is necessary (UI:R). The scope is unchanged (S:U), and the impact on confidentiality, integrity, and availability is low (C:L/I:L/A:L). No public exploits have been reported yet, and no patches are linked in the provided data, but upgrading to version 1.9.20 or later is recommended. The vulnerability is classified under CWE-79, which covers improper neutralization of input during web page generation leading to XSS.

Detailed information about CVE-2024-42906: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-42906: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-42906: n/a


CVE-2024-46097: n/aCVE-2024-46097 0 TestLink 1.9.20 is vulnerable to Incorrect Access Control in the TestPlan editing section. When a new TestPlan is created, an ID with an incremental value is automatically generated. Using the edit function you can change the tplan_id parameter to another ID. The application does not carry out a check on the user's permissions maing it possible to recover the IDs of all the TestPlans (even the administrative ones) and modify them even with minimal privileges. HighVulnerabilityUnited StatesGermanyIndia+7#cve #cve-2024-46097 Join the discussion	CVE Database V5	09/27/2024, 00:00:00 UTC Added: 02/25/2026, 21:43:22 UTC
CVE-2024-42906: n/aCVE-2024-42906 0 TestLink before v.1.9.20 is vulnerable to Cross Site Scripting (XSS) via the pop-up on upload file. When uploading a file, the XSS payload can be entered into the file name. MediumVulnerabilityUnited StatesGermanyIndia+7#cve #cve-2024-42906 Join the discussion	CVE Database V5	08/26/2024, 00:00:00 UTC Added: 02/25/2026, 21:42:40 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional