Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Zero Day Initiative

Cisco Talos

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

java_shop

A file upload vulnerability in java_shop 1.0 allows attackers to upload arbitrary files by modifying the avatar function.

CVE-2024-50652 identifies a file upload vulnerability in the java_shop 1.0 e-commerce platform, specifically within the avatar upload functionality. The vulnerability allows an attacker to bypass restrictions and upload arbitrary files, which can include malicious scripts or executables. This is due to insufficient validation or sanitization of uploaded files, categorized under CWE-434. The attack vector is network-based (AV:N), requires no privileges (PR:N), but does require user interaction (UI:R), such as convincing a user to upload a crafted file or triggering the upload process. The vulnerability affects confidentiality, integrity, and availability by enabling unauthorized file uploads that could lead to remote code execution, data leakage, or service disruption. Although no patches or known exploits are currently available, the vulnerability is publicly disclosed and assigned a CVSS 3.1 score of 6.3, indicating a medium risk. The lack of authentication requirements and the potential for remote exploitation make this a notable threat for organizations using java_shop 1.0, especially those that allow user-generated content or avatar uploads. The absence of patch links suggests that mitigation currently relies on configuration changes and monitoring.

Detailed information about CVE-2024-50652: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-50652: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-50652: n/a

java_shop 1.0 is vulnerable to Incorrect Access Control, which allows attackers to obtain sensitive information of users with different IDs by modifying the ID parameter.

CVE-2024-50651 identifies an Incorrect Access Control vulnerability in the java_shop 1.0 application. This vulnerability arises because the application fails to properly enforce authorization checks on the ID parameter used to retrieve user information. An attacker with limited privileges (PR:L) can manipulate this parameter to access sensitive data belonging to other users, violating confidentiality. The vulnerability does not require user interaction (UI:N) and can be exploited remotely over the network (AV:N). The scope is unchanged (S:U), meaning the impact is confined to the vulnerable component without affecting other system components. The vulnerability is classified under CWE-639, which involves authorization bypass due to improper access control mechanisms. Although no patches or exploits are currently available, the vulnerability presents a significant risk to user data privacy. The CVSS 3.1 base score of 6.5 reflects a medium severity, primarily due to the high confidentiality impact and ease of exploitation with low attack complexity. Organizations running java_shop 1.0 should audit their access control logic, especially around user ID parameters, to prevent unauthorized data disclosure.

Detailed information about CVE-2024-50651: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-50651: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-50651: n/a


CVE-2024-50652: n/aCVE-2024-50652 0 A file upload vulnerability in java_shop 1.0 allows attackers to upload arbitrary files by modifying the avatar function. MediumVulnerabilityUnited StatesIndiaChina+7#cve #cve-2024-50652 Join the discussion	CVE Database V5	11/15/2024, 00:00:00 UTC Added: 02/25/2026, 21:37:32 UTC
CVE-2024-50651: n/aCVE-2024-50651 0 java_shop 1.0 is vulnerable to Incorrect Access Control, which allows attackers to obtain sensitive information of users with different IDs by modifying the ID parameter. MediumVulnerabilityUnited StatesGermanyUnited Kingdom+7#cve #cve-2024-50651 Join the discussion	CVE Database V5	11/15/2024, 00:00:00 UTC Added: 02/25/2026, 21:37:32 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional