Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

AlienVault OTX General

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit NetSec

Reddit Cybersecurity

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

OfficeWeb365

File Upload vulnerability in Xi'an Daxi Information technology OfficeWeb365 v.8.6.1.0 and v7.18.23.0 allows a remote attacker to execute arbitrary code via the pw/savedraw component.

CVE-2024-48694 is a critical remote code execution vulnerability found in Xi'an Daxi Information Technology's OfficeWeb365 software, specifically versions 8.6.1.0 and 7.18.23.0. The flaw exists in the file upload functionality of the pw/savedraw component, which improperly handles uploaded files, allowing an unauthenticated remote attacker to upload malicious files that can be executed on the server. This vulnerability is classified under CWE-94 (Improper Control of Generation of Code), indicating that the application fails to properly validate or sanitize user-supplied input that is used to generate executable code. The CVSS v3.1 score of 9.8 reflects the vulnerability's critical severity, with an attack vector that is network-based (AV:N), requiring no privileges (PR:N) or user interaction (UI:N), and impacting confidentiality, integrity, and availability (C:H/I:H/A:H). The vulnerability was reserved in early October 2024 and published in mid-November 2024, with no known public exploits or patches available at the time of reporting. This suggests that while exploitation is theoretically straightforward, active exploitation has not yet been observed. The vulnerability's presence in widely used versions of OfficeWeb365, a productivity suite likely deployed in enterprise environments, raises concerns about potential widespread impact if exploited.

Detailed information about CVE-2024-48694: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-48694: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-48694: n/a

Arbitrary File Read vulnerability in Xi'an Daxi Information Technology Co., Ltd OfficeWeb365 v.7.18.23.0 and v8.6.1.0 allows a remote attacker to obtain sensitive information via the "Pic/Indexes" interface

CVE-2024-37728 is an arbitrary file read vulnerability identified in Xi'an Daxi Information Technology Co., Ltd's OfficeWeb365 software, specifically versions 7.18.23.0 and 8.6.1.0. The vulnerability resides in the "Pic/Indexes" interface, which improperly validates user input, allowing a remote attacker to perform path traversal attacks and access arbitrary files on the server. This flaw does not require any authentication or user interaction, making it remotely exploitable over the network with low complexity. The vulnerability is categorized under CWE-22 (Path Traversal) and CWE-922 (Insecure Storage of Sensitive Information), indicating that the application fails to properly sanitize file path inputs and may expose sensitive data stored on the server. The CVSS v3.1 base score is 7.5, reflecting high severity due to the high impact on confidentiality and ease of exploitation. While no known exploits have been reported in the wild, the lack of available patches increases the urgency for organizations to implement interim mitigations. The vulnerability could allow attackers to obtain sensitive configuration files, credentials, or other confidential information, potentially facilitating further attacks or data breaches. Given the nature of OfficeWeb365 as an office productivity platform, the exposure of sensitive documents or internal data could have significant operational and reputational consequences.

Detailed information about CVE-2024-37728: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-37728: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-37728: n/a


CVE-2024-48694: n/aCVE-2024-48694 0 File Upload vulnerability in Xi'an Daxi Information technology OfficeWeb365 v.8.6.1.0 and v7.18.23.0 allows a remote attacker to execute arbitrary code via the pw/savedraw component. CriticalVulnerabilityChinaUnited StatesIndia+7#cve #cve-2024-48694 Join the discussion	CVE Database V5	11/19/2024, 00:00:00 UTC Added: 02/25/2026, 21:36:54 UTC
CVE-2024-37728: n/aCVE-2024-37728 0 Arbitrary File Read vulnerability in Xi'an Daxi Information Technology Co., Ltd OfficeWeb365 v.7.18.23.0 and v8.6.1.0 allows a remote attacker to obtain sensitive information via the "Pic/Indexes" interface HighVulnerabilityChinaUnited StatesIndia+7#cve #cve-2024-37728 Join the discussion	CVE Database V5	09/10/2024, 00:00:00 UTC Added: 02/25/2026, 21:41:01 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional