Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit NetSec

Reddit Cybersecurity

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

db-gpt

A security flaw has been discovered in eosphoros-ai db-gpt 0.7.5. Affected is the function importlib.machinery.SourceFileLoader.exec_module of the file /api/v1/serve/awel/flow/import of the component Flow Import Endpoint. Performing a manipulation as part of File results in code injection. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

CVE-2026-3409 is a remote code injection vulnerability found in eosphoros-ai's db-gpt product, version 0.7.5. The flaw resides in the Flow Import Endpoint, specifically within the function importlib.machinery.SourceFileLoader.exec_module, which is used to dynamically load and execute Python modules from files. An attacker can manipulate the file input to this function to inject and execute arbitrary code remotely without requiring authentication or user interaction. This vulnerability arises due to insufficient validation or sanitization of the file content before execution, allowing malicious payloads to be executed in the context of the db-gpt service. The vulnerability has been publicly disclosed with an available exploit, increasing the risk of active exploitation. The vendor was contacted early but has not provided any patch or mitigation guidance, leaving users exposed. The CVSS 4.0 vector indicates network attack vector, low attack complexity, no privileges or user interaction required, and partial impacts on confidentiality, integrity, and availability. This vulnerability could allow attackers to compromise the underlying system, steal data, disrupt services, or pivot within the network.

Detailed information about CVE-2026-3409: Code Injection in eosphoros-ai db-gpt affecting eosphoros-ai db-gpt. Get real-time updates, technical details, and mit

CVE-2026-3409: Code Injection in eosphoros-ai db-gpt - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-3409: Code Injection in eosphoros-ai db-gpt

eosphoros-ai/db-gpt version 0.6.0 is vulnerable to an arbitrary file write through the knowledge API. The endpoint for uploading files as 'knowledge' is susceptible to absolute path traversal, allowing attackers to write files to arbitrary locations on the target server. This vulnerability arises because the 'doc_file.filename' parameter is user-controllable, enabling the construction of absolute paths.

CVE-2024-10833 is a critical security vulnerability identified in the eosphoros-ai/db-gpt software, specifically version 0.6.0. The vulnerability is classified as CWE-36, an absolute path traversal flaw, which allows an attacker to write arbitrary files to any location on the server hosting the application. This occurs through the knowledge API endpoint that accepts file uploads under the 'doc_file.filename' parameter. Because this parameter is user-controllable and lacks proper validation or sanitization, an attacker can craft a filename containing absolute paths (e.g., /etc/passwd or C:\Windows\System32\malicious.dll) to overwrite or create files outside the intended directory. The vulnerability requires no authentication (PR:N) and no user interaction (UI:N), making it remotely exploitable over the network (AV:N) with low attack complexity (AC:L). The impact includes full integrity compromise (I:H) and availability disruption (A:H) of the system, as attackers can overwrite critical files or deploy malicious payloads. Although confidentiality impact is rated none (C:N), the ability to write arbitrary files can indirectly lead to data exposure or further compromise. No patches are currently linked, and no known exploits have been reported in the wild, but the high CVSS score of 9.1 underscores the urgency of addressing this issue. The vulnerability affects unspecified versions but is confirmed in version 0.6.0. Organizations using this AI tool for knowledge ingestion or data processing should consider this a critical risk vector.

Detailed information about CVE-2024-10833: CWE-36 Absolute Path Traversal in eosphoros-ai eosphoros-ai/db-gpt affecting eosphoros-ai eosphoros-ai/db-gpt. Get re

CVE-2024-10833: CWE-36 Absolute Path Traversal in eosphoros-ai eosphoros-ai/db-gpt - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-10833: CWE-36 Absolute Path Traversal in eosphoros-ai eosphoros-ai/db-gpt


CVE-2026-3409: Code Injection in eosphoros-ai db-gptCVE-2026-3409 0 A security flaw has been discovered in eosphoros-ai db-gpt 0.7.5. Affected is the function importlib.machinery.SourceFileLoader.exec_module of the file /api/v1/serve/awel/flow/import of the component Flow Import Endpoint. Performing a manipulation as part of File results in code injection. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. MediumVulnerabilityUnited StatesGermanyJapan+7#cve #cve-2026-3409 Join the discussion	CVE Database V5	03/02/2026, 04:02:08 UTC Added: 03/02/2026, 04:56:10 UTC
CVE-2024-10833: CWE-36 Absolute Path Traversal in eosphoros-ai eosphoros-ai/db-gptCVE-2024-10833 0 eosphoros-ai/db-gpt version 0.6.0 is vulnerable to an arbitrary file write through the knowledge API. The endpoint for uploading files as 'knowledge' is susceptible to absolute path traversal, allowing attackers to write files to arbitrary locations on the target server. This vulnerability arises because the 'doc_file.filename' parameter is user-controllable, enabling the construction of absolute paths. CriticalVulnerabilityGermanyFranceUnited Kingdom+4#cve #cve-2024-10833 #cwe-36 Join the discussion	CVE Database V5	03/20/2025, 10:10:15 UTC Added: 10/15/2025, 13:01:22 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional