Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Zero Day Initiative

Cisco Talos

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

AlienVault OTX General

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit BlueTeam

Reddit ThreatIntel

Reddit Malware

Reddit Reverse Engineering

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

jeecg-boot

A command injection vulnerability in the component /jmreport/show of jeecg boot v3.0.0 to v3.5.3 allows attackers to execute arbitrary code via a crafted HTTP request.

CVE-2024-43028 is a command injection vulnerability affecting the /jmreport/show endpoint in Jeecg Boot versions 3.0.0 through 3.5.3. Jeecg Boot is a rapid development platform based on Java and Spring Boot, widely used for enterprise web applications. The vulnerability arises because the affected component improperly sanitizes or validates user input in HTTP requests, allowing attackers to inject and execute arbitrary operating system commands. By crafting a malicious HTTP request targeting this endpoint, an attacker can execute code with the privileges of the application server process. This can lead to unauthorized access, data theft, system manipulation, or pivoting within the network. The vulnerability does not require user interaction but does require network access to the vulnerable endpoint, which is typically exposed in web applications. Although no public exploits have been reported yet and no official patches have been linked, the nature of command injection vulnerabilities makes this a critical risk if left unmitigated. The lack of a CVSS score indicates this is a newly disclosed issue, but the potential impact is severe given the ability to execute arbitrary code remotely. Organizations using Jeecg Boot versions 3.0.0 to 3.5.3 should urgently assess exposure and apply mitigations or patches once available.

Detailed information about CVE-2024-43028: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-43028: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-43028: n/a

There is an injection vulnerability in jeecg boot versions 3.0.0 to 3.5.3 due to lax character filtering, which allows attackers to execute arbitrary code on components through specially crafted HTTP requests.

CVE-2024-40489 is a critical injection vulnerability identified in jeecg boot versions 3.0.0 through 3.5.3. The root cause is lax character filtering in the processing of HTTP requests, which allows malicious actors to craft requests that inject and execute arbitrary code on the server hosting the vulnerable components. This vulnerability effectively enables remote code execution (RCE) without requiring authentication, making it highly dangerous. The vulnerability stems from improper sanitization of input data, which is a common vector for injection attacks. Although no public exploits have been reported yet, the nature of the flaw means that attackers could leverage it to gain full control over affected systems, manipulate data, disrupt services, or pivot within a network. The affected software, jeecg boot, is a Java-based rapid development platform used primarily in enterprise environments for building web applications. The lack of a CVSS score indicates that the vulnerability is newly disclosed, but the technical details suggest a severe impact. The vulnerability affects multiple versions, indicating a broad attack surface. Organizations using these versions should consider this a critical security risk and act swiftly to mitigate it.

Detailed information about CVE-2024-40489: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-40489: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-40489: n/a


CVE-2024-43028: n/aCVE-2024-43028 0 A command injection vulnerability in the component /jmreport/show of jeecg boot v3.0.0 to v3.5.3 allows attackers to execute arbitrary code via a crafted HTTP request. CriticalVulnerabilityChinaIndiaUnited States+7#cve #cve-2024-43028 Join the discussion	CVE Database V5	04/01/2026, 00:00:00 UTC Added: 04/01/2026, 19:29:40 UTC
CVE-2024-40489: n/aCVE-2024-40489 0 There is an injection vulnerability in jeecg boot versions 3.0.0 to 3.5.3 due to lax character filtering, which allows attackers to execute arbitrary code on components through specially crafted HTTP requests. CriticalVulnerabilityChinaIndiaUnited States+7#cve #cve-2024-40489 Join the discussion	CVE Database V5	04/01/2026, 00:00:00 UTC Added: 04/01/2026, 19:29:40 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional