Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Krebs on Security

Palo Alto Unit 42

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

A vulnerability in unit_deserialize of systemd allows an attacker to supply arbitrary state across systemd re-execution via NotifyAccess. This can be used to improperly influence systemd execution and possibly lead to root privilege escalation. Affected releases are systemd versions up to and including 239.

CVE-2018-15686 is a high-severity vulnerability affecting systemd, a widely used system and service manager for Linux operating systems. The vulnerability arises from the unit_deserialize function within systemd, which improperly handles input supplied via the NotifyAccess mechanism. Specifically, the fgets() function can be confused by overly long input strings, causing the first read to return a partial string and subsequent reads to be treated as if they start on a new line. This behavior allows an attacker to supply arbitrary state information across systemd re-executions. By exploiting this flaw, an attacker with limited privileges (low-level privileges) can influence systemd's execution flow in unintended ways, potentially leading to privilege escalation to root. The vulnerability affects systemd versions up to and including version 239. The CVSS v3.0 score is 7.0, indicating high severity, with the vector indicating local attack vector (AV:L), high attack complexity (AC:H), low privileges required (PR:L), no user interaction (UI:N), unchanged scope (S:U), and high impact on confidentiality, integrity, and availability (C:H/I:H/A:H). No known exploits in the wild have been reported, but the vulnerability represents a significant risk due to the critical role systemd plays in Linux system management and the potential for root privilege escalation. The underlying weakness is classified under CWE-502 (Deserialization of Untrusted Data), which is a common source of security issues when untrusted input is improperly handled during deserialization processes.

Detailed information about CVE-2018-15686: fgets() can be confused by overly-long input strings. The first read will return a partial string and subsequent read

CVE-2018-15686: fgets() can be confused by overly-long input strings. The first read will return a partial string and subsequent reads will begin as if it were a new line. in systemd systemd - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2018-15686: fgets() can be confused by overly-long input strings. The first read will return a partial string and subsequent reads will begin as if it were a new line. in systemd systemd

Threats Tagged 'cve-2018-15686'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2018-15686'

Lead Pen Test Professional