Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Zero Day Initiative

Cisco Talos

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

IDOL2

An issue was discovered in UCI IDOL 2 (aka uciIDOL or IDOL2) through 2.12. Due to improper input validation, improper deserialization, and improper restriction of operations within the bounds of a memory buffer, IDOL2 is vulnerable to Denial-of-Service (DoS) attacks and possibly remote code execution via the \xB0\x00\x3c byte sequence.

CVE-2024-45169 affects UCI IDOL 2 (also known as uciIDOL or IDOL2) through version 2.12. The vulnerability arises from multiple critical flaws: improper input validation, improper deserialization, and improper restriction of operations within the bounds of a memory buffer. These issues collectively allow an attacker to send a crafted byte sequence (specifically \xB0\x00\x3c) to the vulnerable service, which can trigger a denial-of-service condition or potentially enable remote code execution. The root cause involves unsafe handling of input data leading to memory corruption, which attackers can exploit to manipulate program execution flow. The vulnerability is categorized under CWE-119, indicating a buffer-related memory safety error, and CWE-20, indicating failure to properly validate inputs. The CVSS v3.1 base score is 9.8, reflecting the vulnerability's ease of exploitation (network vector, no privileges or user interaction required) and its impact on confidentiality, integrity, and availability. Despite the severity, no public exploit code or active exploitation has been reported yet. No official patches or mitigation advisories have been linked at this time, highlighting the need for vigilance and proactive defensive measures by affected organizations.

Detailed information about CVE-2024-45169: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-45169: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-45169: n/a

An issue was discovered in UCI IDOL 2 (aka uciIDOL or IDOL2) through 2.12. Data is sent between client and server with encryption. However, the key is derived from the string "(c)2007 UCI Software GmbH B.Boll" (without quotes). The key is both static and hardcoded. With access to messages, this results in message decryption and encryption by an attacker. Thus, it enables passive and active man-in-the-middle attacks.

CVE-2024-45165 identifies a cryptographic weakness in UCI IDOL 2 (also known as uciIDOL or IDOL2) versions up to 2.12, where the encryption key for securing data transmitted between client and server is derived from a static, hardcoded string: "(c)2007 UCI Software GmbH B.Boll". This key derivation method violates cryptographic best practices by using a constant, publicly known string as the basis for encryption keys, effectively rendering the encryption trivial to break for anyone who can capture the network traffic. As a result, an attacker with access to the communication channel can decrypt intercepted messages and also forge encrypted messages, enabling both passive eavesdropping and active man-in-the-middle (MITM) attacks. The vulnerability is classified under CWE-798 (Use of Hard-coded Credentials), highlighting the risk of embedding fixed secrets in code. The CVSS v3.1 base score is 5.3 (medium severity), reflecting the attack vector as adjacent network (AV:A), high attack complexity (AC:H), no privileges required (PR:N), no user interaction (UI:N), unchanged scope (S:U), high confidentiality impact (C:H), but no impact on integrity (I:N) or availability (A:N). No patches or fixes have been published yet, and no exploits are currently known in the wild. This vulnerability primarily threatens the confidentiality of data exchanged via UCI IDOL 2, which may include sensitive or proprietary information depending on the deployment context.

Detailed information about CVE-2024-45165: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-45165: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-45165: n/a


CVE-2024-45169: n/aCVE-2024-45169 0 An issue was discovered in UCI IDOL 2 (aka uciIDOL or IDOL2) through 2.12. Due to improper input validation, improper deserialization, and improper restriction of operations within the bounds of a memory buffer, IDOL2 is vulnerable to Denial-of-Service (DoS) attacks and possibly remote code execution via the \xB0\x00\x3c byte sequence. CriticalVulnerabilityUnited StatesUnited KingdomGermany+7#cve #cve-2024-45169 Join the discussion	CVE Database V5	08/22/2024, 00:00:00 UTC Added: 02/25/2026, 21:43:04 UTC
CVE-2024-45165: n/aCVE-2024-45165 0 An issue was discovered in UCI IDOL 2 (aka uciIDOL or IDOL2) through 2.12. Data is sent between client and server with encryption. However, the key is derived from the string "(c)2007 UCI Software GmbH B.Boll" (without quotes). The key is both static and hardcoded. With access to messages, this results in message decryption and encryption by an attacker. Thus, it enables passive and active man-in-the-middle attacks. MediumVulnerabilityGermanySwitzerlandAustria+7#cve #cve-2024-45165 Join the discussion	CVE Database V5	08/22/2024, 00:00:00 UTC Added: 02/25/2026, 21:43:04 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional