Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

It was discovered that a systemd service that uses DynamicUser property can create a SUID/SGID binary that would be allowed to run as the transient service UID/GID even after the service is terminated. A local attacker may use this flaw to access resources that will be owned by a potentially different service in the future, when the UID/GID will be recycled.

CVE-2019-3843 is a medium-severity vulnerability found in systemd version 242, a widely used system and service manager for Linux operating systems, maintained by freedesktop.org. The flaw arises from the improper handling of the DynamicUser property in systemd service units. When a service is configured with DynamicUser, systemd creates a transient user and group ID (UID/GID) for the service, which are intended to be temporary and removed once the service terminates. However, due to this vulnerability, a systemd service can create a SUID (Set User ID) or SGID (Set Group ID) binary that retains the permissions of the transient UID/GID even after the service has stopped. This means that a local attacker with limited privileges can exploit this flaw to create or manipulate such binaries, which continue to run with the privileges of the transient user or group. Since these UIDs/GIDs are recycled over time, the attacker may gain unauthorized access to resources owned by a different service in the future, leading to potential privilege escalation and unauthorized resource access. The vulnerability is categorized under CWE-266 (Incorrect Privilege Assignment), indicating improper management of user privileges. Exploitation requires local access with low privileges but no user interaction, and the attack complexity is high due to the need for specific conditions. No known exploits are reported in the wild, and no official patches are linked in the provided data, though systemd versions after 242 likely address this issue.

Detailed information about CVE-2019-3843: CWE-266 in [freedesktop.org] systemd affecting [freedesktop.org] systemd. Get real-time updates, technical details, an

CVE-2019-3843: CWE-266 in [freedesktop.org] systemd - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2019-3843: CWE-266 in [freedesktop.org] systemd

Threats Tagged 'cve-2019-3843'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2019-3843'

Lead Pen Test Professional