Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Check Point Research

Kaspersky Security Blog

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

LDAP filter injection vulnerability in Yandex Database prior to 25.3.1.25 allows a remote attacker with valid LDAP credentials to bypass group membership checks resulting in unauthorized access to the database.

This vulnerability in Yandex Database involves improper permission handling due to LDAP filter injection. An attacker who already has valid LDAP credentials can exploit this flaw to bypass group membership verification, thereby accessing database resources without proper authorization. The issue affects versions before 25.3.1.25. The CVSS 4.0 vector indicates network attack vector, low attack complexity, no user interaction required, and limited impact on confidentiality, integrity, and availability. No vendor advisory or patch information is provided, and the product is not a cloud service.

Detailed information about CVE-2026-10549: CWE-280 Improper handling of insufficient permissions or privileges in Yandex Yandex Database affecting Yandex Yandex

CVE-2026-10549: CWE-280 Improper handling of insufficient permissions or privileges in Yandex Yandex Database - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-10549: CWE-280 Improper handling of insufficient permissions or privileges in Yandex Yandex Database

Missing Release of Memory after Effective Lifetime vulnerability in ydb-platform ydb (contrib/libs/yajl modules). This vulnerability is associated with program files yail_tree.C.

This issue affects ydb: through 24.4.4.2.

CVE-2026-24825 identifies a memory management vulnerability in the ydb-platform's ydb product, specifically within the contrib/libs/yajl modules and the yail_tree.C source files. The flaw is classified as CWE-401, indicating a missing release of memory after its effective lifetime, which typically results in memory leaks. This vulnerability affects versions of ydb up to and including 24.4.4.2. The issue arises because the software fails to free allocated memory once it is no longer needed, causing the application to consume increasing amounts of memory over time. According to the CVSS 4.0 vector, the vulnerability is remotely exploitable over the network without requiring authentication or user interaction, and it does not affect confidentiality or integrity but impacts availability by potentially causing resource exhaustion. The CVSS base score is 6.9, categorized as medium severity. No known exploits have been reported in the wild, but the risk remains due to the ease of exploitation and the potential for denial-of-service conditions. The vulnerability's presence in a core data platform component means that affected systems could experience degraded performance or outages if exploited. The absence of vendor patches at the time of reporting necessitates proactive monitoring and mitigation by users of the ydb platform.

Detailed information about CVE-2026-24825: CWE-401 Missing Release of Memory after Effective Lifetime in ydb-platform ydb affecting ydb-platform ydb. Get real-t

CVE-2026-24825: CWE-401 Missing Release of Memory after Effective Lifetime in ydb-platform ydb - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-24825: CWE-401 Missing Release of Memory after Effective Lifetime in ydb-platform ydb


CVE-2026-10549: CWE-280 Improper handling of insufficient permissions or privileges in Yandex Yandex DatabaseCVE-2026-10549 0 LDAP filter injection vulnerability in Yandex Database prior to 25.3.1.25 allows a remote attacker with valid LDAP credentials to bypass group membership checks resulting in unauthorized access to the database. MediumVulnerability#cve #cve-2026-10549 #cwe-280 Join the discussion	CVE Database V5	06/02/2026, 08:27:06 UTC Added: 06/02/2026, 10:03:44 UTC
CVE-2026-24825: CWE-401 Missing Release of Memory after Effective Lifetime in ydb-platform ydbCVE-2026-24825 0 Missing Release of Memory after Effective Lifetime vulnerability in ydb-platform ydb (contrib/libs/yajl modules). This vulnerability is associated with program files yail_tree.C. This issue affects ydb: through 24.4.4.2. MediumVulnerabilityGermanyFranceUnited Kingdom+2#cve #cve-2026-24825 #cwe-401 Join the discussion	CVE Database V5	01/27/2026, 09:02:51 UTC Added: 01/27/2026, 09:20:56 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional