Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

AlienVault OTX General

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit NetSec

Reddit Cybersecurity

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

ggit

All versions of the package ggit are vulnerable to Arbitrary Argument Injection via the clone() API, which allows specifying the remote URL to clone and the file on disk to clone to. The library does not sanitize for user input or validate a given URL scheme, nor does it properly pass command-line flags to the git binary using the double-dash POSIX characters (--) to communicate the end of options.

CVE-2024-21533 affects all versions of the ggit package, a library that provides git functionality programmatically. The vulnerability stems from improper handling of user-supplied input in the clone() API, which accepts a remote URL and a local file path to clone a repository. The core issue is that ggit does not sanitize or validate the URL scheme, nor does it correctly pass command-line flags to the underlying git binary using the POSIX standard double-dash (--) to indicate the end of options. This omission allows an attacker to inject arbitrary command-line arguments into the git invocation, potentially executing unintended git commands or causing denial of service. The vulnerability is classified under CWE-88 (Argument Injection or Modification). According to the CVSS v3.1 vector (6.5 medium), the attack can be performed remotely without authentication or user interaction, with low attack complexity. The impact affects integrity and availability but not confidentiality. No patches are currently available, and no exploits have been observed in the wild. This vulnerability is particularly concerning for automated systems and CI/CD pipelines that use ggit to clone repositories based on user input or external data, as it could lead to repository tampering or disruption of development workflows.

Detailed information about CVE-2024-21533: Arbitrary Argument Injection in ggit affecting null ggit. Get real-time updates, technical details, and mitigation st

CVE-2024-21533: Arbitrary Argument Injection in ggit - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-21533: Arbitrary Argument Injection in ggit

All versions of the package ggit are vulnerable to Command Injection via the fetchTags(branch) API, which allows user input to specify the branch to be fetched and then concatenates this string along with a git command which is then passed to the unsafe exec() Node.js child process API.

CVE-2024-21532 is a command injection vulnerability found in all versions of the ggit package, specifically within the fetchTags(branch) API. This API accepts a branch name as input and concatenates it directly into a git command string, which is then executed using Node.js's child_process exec() function without proper sanitization or validation. Because exec() runs commands in a shell, an attacker can inject arbitrary shell commands by crafting malicious branch names. The vulnerability requires no privileges or user interaction, making it remotely exploitable over any interface that exposes this API. The CVSS v3.1 base score is 7.3, indicating high severity, with attack vector network, low attack complexity, no privileges required, no user interaction, and impacts on confidentiality, integrity, and availability. Although no public exploits are known yet, the nature of the vulnerability allows for remote code execution, which could lead to system compromise, data leakage, or service disruption. The lack of patches or mitigations currently published increases the urgency for users to implement workarounds or restrict access to vulnerable endpoints.

Detailed information about CVE-2024-21532: Command Injection in ggit affecting null ggit. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-21532: Command Injection in ggit - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-21532: Command Injection in ggit


CVE-2024-21533: Arbitrary Argument Injection in ggitCVE-2024-21533 0 All versions of the package ggit are vulnerable to Arbitrary Argument Injection via the clone() API, which allows specifying the remote URL to clone and the file on disk to clone to. The library does not sanitize for user input or validate a given URL scheme, nor does it properly pass command-line flags to the git binary using the double-dash POSIX characters (--) to communicate the end of options. MediumVulnerabilityUnited StatesGermanyJapan+7#cve #cve-2024-21533 Join the discussion	CVE Database V5	10/08/2024, 05:00:05 UTC Added: 03/21/2026, 22:45:51 UTC
CVE-2024-21532: Command Injection in ggitCVE-2024-21532 0 All versions of the package ggit are vulnerable to Command Injection via the fetchTags(branch) API, which allows user input to specify the branch to be fetched and then concatenates this string along with a git command which is then passed to the unsafe exec() Node.js child process API. HighVulnerabilityUnited StatesGermanyUnited Kingdom+7#cve #cve-2024-21532 Join the discussion	CVE Database V5	10/08/2024, 05:00:03 UTC Added: 03/21/2026, 22:45:51 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional