Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

CVE Database V5

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

sonarqube

In SonarSource SonarQube 10.4 through 10.5 before 10.6, a vulnerability was discovered in the authorizations/group-memberships API endpoint that allows SonarQube users with the administrator role to inject blind SQL commands.

CVE-2024-47911 is a SQL injection vulnerability identified in the SonarSource SonarQube platform, specifically affecting versions 10.4 through 10.5 prior to 10.6. The flaw exists in the authorizations/group-memberships API endpoint, which is responsible for managing user group memberships and permissions. An attacker possessing administrator privileges can exploit this vulnerability by injecting blind SQL commands into the API requests. Blind SQL injection means the attacker can infer database information by observing application behavior or response times, even though direct query results are not returned. The vulnerability is classified under CWE-89 (Improper Neutralization of Special Elements used in an SQL Command), indicating that user input is not properly sanitized before being incorporated into SQL queries. The CVSS v3.1 base score is 6.7, reflecting a medium severity level. The vector indicates low attack complexity, network attack vector, no user interaction required, and privileges required are high (administrator role). The impact includes high confidentiality and integrity loss, as attackers can extract or modify sensitive data within the SonarQube database. Availability impact is low. No public exploits have been reported yet, but the presence of administrator privileges as a prerequisite limits the attack surface to trusted users or compromised admin accounts. SonarQube is widely used in software development environments for continuous code quality and security analysis, making this vulnerability significant for organizations relying on it for secure development lifecycle processes.

Detailed information about CVE-2024-47911: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-47911: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-47911: n/a

An issue was discovered in SonarSource SonarQube before 9.9.5 LTA and 10.x before 10.5. A SonarQube user with the Administrator role can modify an existing configuration of a GitHub integration to exfiltrate a pre-signed JWT.

CVE-2024-47910 is a vulnerability identified in SonarSource SonarQube, specifically in versions prior to 9.9.5 LTA and 10.x before 10.5. The flaw allows a user holding the Administrator role within SonarQube to alter the configuration of an existing GitHub integration. By doing so, the attacker can exfiltrate a pre-signed JSON Web Token (JWT) that is used for authentication with GitHub services. This token exfiltration can lead to unauthorized access to GitHub repositories or services linked to the token, potentially exposing sensitive code, configuration, or enabling further lateral movement. The vulnerability stems from improper access control (CWE-284), where the system fails to sufficiently restrict modification of integration configurations to prevent token leakage. The CVSS 3.1 score of 7.2 reflects a high-severity issue, with an attack vector over the network (AV:N), low attack complexity (AC:L), requiring privileges (PR:H) but no user interaction (UI:N). The scope remains unchanged (S:U), but the impact on confidentiality, integrity, and availability is high (C:H/I:H/A:H). No public exploits have been reported yet, but the potential for misuse exists given the sensitive nature of the JWT tokens involved. SonarQube is widely used in continuous integration and code quality analysis pipelines, making this vulnerability relevant to many organizations relying on GitHub integrations for automated workflows.

Detailed information about CVE-2024-47910: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-47910: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-47910: n/a


CVE-2024-47911: n/aCVE-2024-47911 0 In SonarSource SonarQube 10.4 through 10.5 before 10.6, a vulnerability was discovered in the authorizations/group-memberships API endpoint that allows SonarQube users with the administrator role to inject blind SQL commands. MediumVulnerabilityUnited StatesGermanyFrance+9#cve #cve-2024-47911 Join the discussion	CVE Database V5	10/04/2024, 00:00:00 UTC Added: 02/25/2026, 21:43:37 UTC
CVE-2024-47910: n/aCVE-2024-47910 0 An issue was discovered in SonarSource SonarQube before 9.9.5 LTA and 10.x before 10.5. A SonarQube user with the Administrator role can modify an existing configuration of a GitHub integration to exfiltrate a pre-signed JWT. HighVulnerabilityUnited StatesGermanyUnited Kingdom+7#cve #cve-2024-47910 Join the discussion	CVE Database V5	10/04/2024, 00:00:00 UTC Added: 02/25/2026, 21:43:37 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional