Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

iBarn

zhimengzhe iBarn v1.5 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the $search parameter at /own.php.

CVE-2024-38470 identifies a reflected cross-site scripting (XSS) vulnerability in zhimengzhe iBarn version 1.5, specifically via the $search parameter on the /own.php endpoint. Reflected XSS occurs when user-supplied input is immediately included in the response page without proper sanitization or encoding, allowing attackers to inject malicious JavaScript code. When a victim clicks a crafted link containing the malicious payload in the $search parameter, the script executes in the victim's browser context. This can lead to theft of session cookies, redirection to malicious sites, or execution of arbitrary actions on behalf of the user. The vulnerability has a CVSS 3.1 score of 6.1, reflecting a medium severity level due to its network attack vector, low attack complexity, no privileges required, but requiring user interaction. The scope is changed (S:C), indicating that exploitation can affect resources beyond the vulnerable component. Confidentiality and integrity impacts are low, while availability is not affected. No patches or known exploits are currently reported, but the presence of CWE-79 highlights the classic nature of this injection flaw. The vulnerability underscores the importance of proper input validation and output encoding in web applications to prevent script injection attacks.

Detailed information about CVE-2024-38470: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-38470: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-38470: n/a

zhimengzhe iBarn v1.5 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the $search parameter at /pay.php.

CVE-2024-38469 identifies a reflected cross-site scripting (XSS) vulnerability in zhimengzhe iBarn version 1.5, located in the $search parameter of the /pay.php script. Reflected XSS occurs when user-supplied input is immediately returned by the web server without proper sanitization or encoding, allowing attackers to inject malicious JavaScript code. When a victim clicks a crafted URL containing the malicious payload, the script executes in their browser under the domain's trust, potentially stealing cookies, session tokens, or performing actions on behalf of the user. The vulnerability is classified under CWE-80, indicating improper neutralization of script-related HTML tags. The CVSS 3.1 score of 6.3 reflects a medium severity, with network attack vector, low attack complexity, no privileges required, but requiring user interaction. The impact includes limited confidentiality, integrity, and availability losses, such as session hijacking, phishing, or UI manipulation. No patches or known exploits are currently available, which suggests the vulnerability is newly disclosed. The absence of affected version details beyond v1.5 limits precise scope assessment. The vulnerability affects web applications that rely on the vulnerable parameter without proper input validation or output encoding. This flaw is a common web security issue that can be mitigated by standard secure coding practices.

Detailed information about CVE-2024-38469: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-38469: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-38469: n/a

zhimengzhe iBarn v1.5 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the $search parameter at /index.php.

CVE-2024-37625 identifies a reflected cross-site scripting (XSS) vulnerability in zhimengzhe iBarn version 1.5, located in the $search parameter of the /index.php endpoint. Reflected XSS occurs when user-supplied input is immediately returned by a web application without proper sanitization or encoding, allowing attackers to inject malicious JavaScript code. When a victim clicks a crafted link containing the malicious payload, the script executes in their browser with the privileges of the vulnerable site, potentially stealing cookies, session tokens, or performing actions on behalf of the user. The CVSS 3.1 base score of 6.3 reflects a medium severity, with an attack vector of network (AV:N), low attack complexity (AC:L), no privileges required (PR:N), but requiring user interaction (UI:R). The scope remains unchanged (S:U), and the impact affects confidentiality, integrity, and availability at a low level (C:L/I:L/A:L). No patches or known exploits are currently available, indicating the vulnerability is newly disclosed. The CWE-79 classification confirms it as a classic XSS issue. Given the nature of reflected XSS, exploitation depends on social engineering to lure users to malicious URLs. The vulnerability can be mitigated by proper input validation, output encoding, and security headers such as Content Security Policy (CSP).

Detailed information about CVE-2024-37625: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-37625: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-37625: n/a

A reflected cross-site scripting (XSS) vulnerability in zhimengzhe iBarn v1.5 allows attackers to inject malicious JavaScript into the web browser of a victim via the search parameter in offer.php.

CVE-2024-26471 identifies a reflected cross-site scripting (XSS) vulnerability in zhimengzhe iBarn version 1.5, specifically within the offer.php page's 'search' parameter. Reflected XSS occurs when untrusted user input is immediately returned by a web application without proper sanitization or encoding, allowing attackers to inject malicious JavaScript code. When a victim accesses a crafted URL containing the malicious payload, the injected script executes in their browser context, potentially leading to session hijacking, credential theft, or unauthorized actions performed on behalf of the user. This vulnerability requires no authentication (AV:N) and has low attack complexity (AC:L), but does require user interaction (UI:R) since the victim must click or visit the malicious link. The scope is unchanged (S:U), meaning the vulnerability affects only the vulnerable component. The CVSS 3.1 base score is 5.4, reflecting limited confidentiality and integrity impact (C:L/I:L) and no availability impact (A:N). No known exploits have been reported in the wild, and no official patches or fixes have been published yet. The vulnerability is categorized under CWE-79, a well-known weakness related to improper neutralization of input during web page generation. Organizations using zhimengzhe iBarn v1.5 should prioritize input validation and output encoding to mitigate this risk. Additionally, user education to avoid clicking suspicious links and monitoring for unusual activity can reduce exploitation likelihood.

Detailed information about CVE-2024-26471: n/a. Get real-time updates, technical details, and mitigation strategies.


CVE-2024-38470: n/aCVE-2024-38470 0 zhimengzhe iBarn v1.5 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the $search parameter at /own.php. MediumVulnerabilityChinaIndiaUnited States+7#cve #cve-2024-38470 Join the discussion	CVE Database V5	06/17/2024, 00:00:00 UTC Added: 02/25/2026, 21:41:14 UTC
CVE-2024-38469: n/aCVE-2024-38469 0 zhimengzhe iBarn v1.5 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the $search parameter at /pay.php. MediumVulnerabilityChinaTaiwanSingapore+6#cve #cve-2024-38469 Join the discussion	CVE Database V5	06/17/2024, 00:00:00 UTC Added: 02/25/2026, 21:41:14 UTC
CVE-2024-37625: n/aCVE-2024-37625 0 zhimengzhe iBarn v1.5 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the $search parameter at /index.php. MediumVulnerabilityChinaUnited StatesIndia+7#cve #cve-2024-37625 Join the discussion	CVE Database V5	06/17/2024, 00:00:00 UTC Added: 02/25/2026, 21:40:58 UTC
CVE-2024-26471: n/aCVE-2024-26471 0 A reflected cross-site scripting (XSS) vulnerability in zhimengzhe iBarn v1.5 allows attackers to inject malicious JavaScript into the web browser of a victim via the search parameter in offer.php. MediumVulnerabilityChinaUnited StatesIndia+7#cve #cve-2024-26471 Join the discussion	CVE Database V5	02/27/2024, 00:00:00 UTC Added: 02/25/2026, 21:45:27 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional