Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Zero Day Initiative

Cisco Talos

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

strapi

Strapi through 4.5.5 does not verify the access or ID tokens issued during the OAuth flow when the AWS Cognito login provider is used for authentication. A remote attacker could forge an ID token that is signed using the 'None' type algorithm to bypass authentication and impersonate any user that use AWS Cognito for authentication.

CVE-2023-22893 is a critical authentication bypass vulnerability found in Strapi, an open-source headless CMS, affecting versions through 4.5.5. The vulnerability stems from improper validation of OAuth tokens when AWS Cognito is used as the authentication provider. Specifically, Strapi fails to verify the cryptographic signature of access and ID tokens, allowing an attacker to craft a malicious ID token using the 'None' algorithm, which effectively means no signature. This flaw is a classic example of a JWT (JSON Web Token) signature verification bypass, categorized under CWE-287 (Improper Authentication). By exploiting this, a remote attacker can impersonate any user without possessing valid credentials or requiring any user interaction, leading to unauthorized access to protected resources. The CVSS v3.1 score of 8.2 reflects the high impact on confidentiality with low attack complexity and no privileges or user interaction needed. Although no public exploits have been reported, the vulnerability is severe due to the widespread use of Strapi in web applications and the popularity of AWS Cognito for identity management. The lack of token signature verification undermines the trust model of OAuth and JWT, potentially exposing sensitive data and administrative functions to attackers.

Detailed information about CVE-2023-22893: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2023-22893: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2023-22893: n/a

Strapi through 4.5.5 allows authenticated Server-Side Template Injection (SSTI) that can be exploited to execute arbitrary code on the server. A remote attacker with access to the Strapi admin panel can inject a crafted payload that executes code on the server into an email template that bypasses the validation checks that should prevent code execution.

CVE-2023-22621 is a critical Server-Side Template Injection (SSTI) vulnerability affecting Strapi, an open-source headless CMS widely used for backend content management. The vulnerability exists in versions up to 4.5.5 and allows an attacker with authenticated access to the Strapi admin panel to inject malicious payloads into email templates. These templates are processed server-side, and the injected code bypasses existing validation mechanisms designed to prevent code execution. As a result, the attacker can execute arbitrary code on the server hosting Strapi, potentially leading to full system compromise. The vulnerability is classified under CWE-74 (Improper Neutralization of Special Elements in Output Used by a Downstream Component), highlighting the failure to properly sanitize template inputs. The CVSS v3.1 score of 10.0 indicates the vulnerability is remotely exploitable over the network without any privileges or user interaction, and it impacts confidentiality, integrity, and availability with a scope change, meaning it can affect resources beyond the initially vulnerable component. No public exploits have been reported yet, but the critical nature of the flaw demands immediate attention. The lack of patch links suggests that fixes may be pending or need to be obtained from Strapi's official channels. This vulnerability is particularly dangerous because it leverages the trusted admin interface, which if compromised, can be a gateway to deeper network infiltration.

Detailed information about CVE-2023-22621: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2023-22621: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2023-22621: n/a


CVE-2023-22893: n/aCVE-2023-22893 0 Strapi through 4.5.5 does not verify the access or ID tokens issued during the OAuth flow when the AWS Cognito login provider is used for authentication. A remote attacker could forge an ID token that is signed using the 'None' type algorithm to bypass authentication and impersonate any user that use AWS Cognito for authentication. HighVulnerabilityGermanyUnited KingdomFrance+4#cve #cve-2023-22893 Join the discussion	CVE Database V5	04/19/2023, 00:00:00 UTC Added: 11/07/2025, 17:14:47 UTC
CVE-2023-22621: n/aCVE-2023-22621 0 Strapi through 4.5.5 allows authenticated Server-Side Template Injection (SSTI) that can be exploited to execute arbitrary code on the server. A remote attacker with access to the Strapi admin panel can inject a crafted payload that executes code on the server into an email template that bypasses the validation checks that should prevent code execution. CriticalVulnerabilityGermanyFranceUnited Kingdom+4#cve #cve-2023-22621 Join the discussion	CVE Database V5	04/19/2023, 00:00:00 UTC Added: 11/07/2025, 17:14:47 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional