Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Microsoft Security Blog

Google Project Zero

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

setuptools

pip-tools

A vulnerability in the `package_index` module of pypa/setuptools versions up to 69.1.1 allows for remote code execution via its download functions. These functions, which are used to download packages from URLs provided by users or retrieved from package index servers, are susceptible to code injection. If these functions are exposed to user-controlled inputs, such as package URLs, they can execute arbitrary commands on the system. The issue is fixed in version 70.0.

The Red Hat Security Advisory RHSA-2026:33154 addresses multiple vulnerabilities affecting Red Hat Ceph Storage container images based on Ceph 7.1 and the ubi9 base image. Among these, CVE-2024-12905 is a significant vulnerability in the tar-fs Node.js package that permits attackers to extract malicious tar files causing unauthorized file writes or overwrites outside the intended extraction directory. This occurs due to improper handling of link resolution and pathname limitations, classified under CWE-59. The advisory lists multiple CVEs but does not provide explicit patch details, only updated container images available from the Red Hat container registry. The vulnerabilities have a high severity rating, with no known exploits in the wild. The advisory emphasizes the importance of using updated container images to mitigate these issues.

Detailed information about Red Hat Security Advisory: fence-agents security update affecting Red Hat Product Security Red Hat. Get real-time updates, technical 

Red Hat Security Advisory: fence-agents security update - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2026:33154

https://access.redhat.com/security/cve/CVE-2024-12905

https://access.redhat.com/security/cve/CVE-2024-55565

https://access.redhat.com/security/cve/CVE-2024-6345

https://access.redhat.com/security/cve/CVE-2025-13465

https://access.redhat.com/security/cve/CVE-2025-45768

https://access.redhat.com/security/cve/CVE-2025-47913

https://access.redhat.com/security/cve/CVE-2025-50181

https://access.redhat.com/security/cve/CVE-2025-52555

https://access.redhat.com/security/cve/CVE-2025-5889

https://access.redhat.com/security/cve/CVE-2025-59343

https://access.redhat.com/security/cve/CVE-2026-21441

https://access.redhat.com/security/updates/classification/

https://docs.redhat.com/en/documentation/red_hat_ceph_storage/

Canonical URL

https://access.redhat.com/errata/RHSA-2024:6309

https://access.redhat.com/security/updates/classification/#moderate

2292788

2297771

https://access.redhat.com/errata/RHBA-2024:5039

PROJQUAY-7177

PROJQUAY-7425

PROJQUAY-7446

PROJQUAY-7449

PROJQUAY-7467

PROJQUAY-7487

PROJQUAY-7491

PROJQUAY-7523

PROJQUAY-7578

Pip tools: setuptools vulnerable to Command Injection via package URL (CVE-2024-6345)

The Red Hat Storage Ceph container images are based on the latest ubi9 base image and Ceph 7.1.
This release updates to the latest version.

The python3.11-setuptools package, which provides enhancements to Python 3 distribution utilities and runtime components necessary for pkg_resources, contains a remote code execution vulnerability (CVE-2024-6345) in the download functions of the package_index module. This flaw allows an attacker to execute arbitrary code remotely. Red Hat has issued security advisories RHSA-2024:5000 and RHSA-2024:5002 providing updated packages that fix this issue for Red Hat Enterprise Linux 8.8 Extended Update Support and related variants.

Detailed information about Red Hat Security Advisory: resource-agents security update affecting Red Hat Product Security Red Hat. Get real-time updates, technic

Red Hat Security Advisory: resource-agents security update - Live Threat Intelligence - Threat Radar | OffSeq.com


Pip tools: setuptools vulnerable to Command Injection via package URL (CVE-2024-6345)CVE-2024-6345 0 A vulnerability in the `package_index` module of pypa/setuptools versions up to 69.1.1 allows for remote code execution via its download functions. These functions, which are used to download packages from URLs provided by users or retrieved from package index servers, are susceptible to code injection. If these functions are exposed to user-controlled inputs, such as package URLs, they can execute arbitrary commands on the system. The issue is fixed in version 70.0. HighVulnerability#gcve #csaf #cve-2024-6345 Join the discussion	GCVE Database	08/13/2026, 17:28:21 UTC Added: 06/02/2026, 21:43:30 UTC
Red Hat Security Advisory: Red Hat Ceph StorageCVE-2024-6345 0 The Red Hat Storage Ceph container images are based on the latest ubi9 base image and Ceph 7.1. This release updates to the latest version. HighVulnerability#gcve #csaf #cve-2024-6345 Join the discussion	GCVE Database	06/29/2026, 15:52:25 UTC Added: 06/02/2026, 21:43:30 UTC

Threats Tagged 'brew-pip-tools-cve-2024-6345'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'brew-pip-tools-cve-2024-6345'

Lead Pen Test Professional