Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Zero Day Initiative

Cisco Talos

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

zammad

Zammad before 6.4.1 places sensitive data (such as auth_microsoft_office365_credentials and application_secret) in log files.

CVE-2024-55578 identifies a vulnerability in Zammad, an open-source helpdesk and customer support platform, where sensitive information such as 'auth_microsoft_office365_credentials' and 'application_secret' are logged in plaintext within application log files prior to version 6.4.1. This vulnerability falls under CWE-532 (Inclusion of Sensitive Information in Log Files), which is a common security weakness where confidential data is improperly recorded in logs. The CVSS 3.1 base score is 4.3, reflecting a medium severity primarily due to confidentiality impact. The vector indicates that the vulnerability can be exploited remotely over the network (AV:N) with low attack complexity (AC:L) and requires privileges (PR:L), but no user interaction (UI:N). The scope is unchanged (S:U), and the impact is limited to confidentiality (C:L), with no integrity (I:N) or availability (A:N) impact. The vulnerability arises from improper handling of sensitive credentials during logging operations, which could allow an attacker with access to log files to extract authentication secrets. Although no known exploits are reported, the exposure of credentials can facilitate further attacks such as unauthorized access to integrated Microsoft Office 365 services or the Zammad application itself. The vulnerability highlights the importance of secure logging practices and credential management within enterprise applications.

Detailed information about CVE-2024-55578: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-55578: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-55578: n/a

An issue was discovered in Zammad before 6.3.0. The Zammad Upload Cache uses insecure, partially guessable FormIDs to identify content. An attacker could try to brute force them to upload malicious content to article drafts they have no access to.

CVE-2024-33668 is a critical security vulnerability affecting Zammad, an open-source helpdesk and customer support platform, in versions prior to 6.3.0. The vulnerability arises from the use of insecure, partially guessable FormIDs by the Zammad Upload Cache mechanism to identify uploaded content. These FormIDs are intended to associate uploaded files with article drafts. However, due to their predictability, an attacker without any authentication or user interaction can perform brute force attacks to guess valid FormIDs. Successfully guessing a FormID allows the attacker to upload arbitrary malicious content to article drafts they do not have legitimate access to, thereby compromising the confidentiality and integrity of the system's data. The vulnerability is classified under CWE-639 (Authorization Bypass Through User-Controlled Key) because the system relies on weak identifiers for access control rather than robust authentication or authorization checks. The CVSS v3.1 base score is 9.1, reflecting the vulnerability's ease of exploitation (network attack vector, no privileges required, no user interaction) and its high impact on confidentiality and integrity. Although no public exploits have been reported yet, the vulnerability poses a significant risk to organizations using affected Zammad versions, especially those managing sensitive customer or internal data. The lack of a patch link in the provided data suggests that users should verify the availability of updates from official Zammad sources and apply version 6.3.0 or later where the issue is resolved.

Detailed information about CVE-2024-33668: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-33668: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-33668: n/a

An issue was discovered in Zammad before 6.3.0. An authenticated agent could perform a remote Denial of Service attack by calling an endpoint that accepts a generic method name, which was not properly sanitized against an allowlist.

CVE-2024-33667 is a vulnerability identified in Zammad, an open-source helpdesk and customer support platform, affecting versions before 6.3.0. The issue stems from an endpoint that accepts a generic method name parameter, which is not properly sanitized or validated against an allowlist of permitted methods. This lack of strict input validation allows an authenticated agent—meaning a user with legitimate credentials but potentially malicious intent—to invoke arbitrary methods remotely. Exploiting this flaw can lead to a Denial of Service (DoS) condition, where the service becomes unavailable or unresponsive, impacting the availability of the helpdesk system. The vulnerability is categorized under CWE-862, indicating missing authorization controls, which means that while authentication is required, the authorization checks to restrict method invocation are insufficient or absent. The CVSS v3.1 base score is 6.5 (medium severity), reflecting that the attack vector is network-based, requires low attack complexity, privileges (authenticated agent), no user interaction, and impacts availability only, without affecting confidentiality or integrity. No known public exploits have been reported yet, and no official patches are linked in the provided data, but upgrading to Zammad 6.3.0 or later is implied to resolve the issue. This vulnerability highlights the importance of strict input validation and authorization enforcement on API endpoints that accept method names or commands.

Detailed information about CVE-2024-33667: n/a. Get real-time updates, technical details, and mitigation strategies.


CVE-2024-55578: n/aCVE-2024-55578 0 Zammad before 6.4.1 places sensitive data (such as auth_microsoft_office365_credentials and application_secret) in log files. MediumVulnerabilityUnited StatesGermanyUnited Kingdom+7#cve #cve-2024-55578 Join the discussion	CVE Database V5	12/09/2024, 00:00:00 UTC Added: 02/25/2026, 21:38:24 UTC
CVE-2024-33668: n/aCVE-2024-33668 0 An issue was discovered in Zammad before 6.3.0. The Zammad Upload Cache uses insecure, partially guessable FormIDs to identify content. An attacker could try to brute force them to upload malicious content to article drafts they have no access to. CriticalVulnerabilityUnited StatesGermanyUnited Kingdom+7#cve #cve-2024-33668 Join the discussion	CVE Database V5	04/26/2024, 00:00:00 UTC Added: 02/25/2026, 21:40:20 UTC
CVE-2024-33667: n/aCVE-2024-33667 0 An issue was discovered in Zammad before 6.3.0. An authenticated agent could perform a remote Denial of Service attack by calling an endpoint that accepts a generic method name, which was not properly sanitized against an allowlist. MediumVulnerabilityUnited StatesGermanyUnited Kingdom+7#cve #cve-2024-33667 Join the discussion	CVE Database V5	04/26/2024, 00:00:00 UTC Added: 02/25/2026, 21:40:20 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional