Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Zero Day Initiative

Cisco Talos

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

An allocation of memory without limits, that could result in the stack clashing with another memory region, was discovered in systemd-journald when many entries are sent to the journal socket. A local attacker, or a remote one if systemd-journal-remote is used, may use this flaw to crash systemd-journald or execute code with journald privileges. Versions through v240 are vulnerable.

CVE-2018-16865 is a high-severity vulnerability in the systemd project, specifically affecting systemd-journald, the system service responsible for event logging on many Linux distributions. The flaw arises from an uncontrolled memory allocation when numerous entries are sent to the journal socket. This can cause the stack to clash with other memory regions, leading to memory corruption. The vulnerability affects systemd versions through v240. An attacker with local access can exploit this flaw to crash systemd-journald, resulting in denial of service, or potentially execute arbitrary code with the privileges of the journald process. Remote exploitation is also possible if systemd-journal-remote is enabled, which listens for journal entries over the network. The vulnerability is classified under CWE-770 (Allocation of Resources Without Limits or Throttling), indicating that the system does not properly limit resource consumption, leading to instability or compromise. The CVSS v3.0 score is 7.5 (High), reflecting the significant impact on confidentiality, integrity, and availability, though exploitation requires low privileges and high attack complexity. No known exploits in the wild have been reported, but the potential for local or remote code execution makes this a critical concern for affected systems.

Detailed information about CVE-2018-16865: CWE-770 in The systemd Project systemd affecting The systemd Project systemd. Get real-time updates, technical detail

CVE-2018-16865: CWE-770 in The systemd Project systemd - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2018-16865: CWE-770 in The systemd Project systemd

Threats Tagged 'cve-2018-16865'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2018-16865'

Lead Pen Test Professional