Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

An issue was discovered in BusyBox through 1.30.0. An out of bounds read in udhcp components (consumed by the DHCP client, server, and/or relay) might allow a remote attacker to leak sensitive information from the stack by sending a crafted DHCP message. This is related to assurance of a 4-byte length when decoding DHCP_SUBNET. NOTE: this issue exists because of an incomplete fix for CVE-2018-20679.

CVE-2019-5747 is a high-severity vulnerability affecting BusyBox versions up to 1.30.0, specifically within the udhcp components used by the DHCP client, server, and relay functionalities. The vulnerability arises from an out-of-bounds read condition triggered when processing DHCP messages, particularly related to the DHCP_SUBNET option. The root cause is an incomplete fix for a previous vulnerability (CVE-2018-20679), where the code failed to properly enforce a 4-byte length check during decoding. This flaw allows a remote attacker to send a crafted DHCP message that causes the DHCP component to read beyond the intended buffer boundaries on the stack, potentially leaking sensitive information. The vulnerability does not require any authentication or user interaction and can be exploited remotely over the network. The CVSS 3.1 base score of 7.5 reflects the high confidentiality impact due to information disclosure, with no impact on integrity or availability. The attack vector is network-based with low complexity and no privileges required, making exploitation feasible in environments where vulnerable BusyBox DHCP components are exposed to untrusted DHCP servers or clients. BusyBox is widely used in embedded systems, routers, IoT devices, and lightweight Linux distributions, meaning this vulnerability could affect a broad range of devices that rely on its DHCP functionality. The lack of a patch link suggests that users must verify if updated BusyBox versions or vendor-specific firmware updates are available to remediate this issue. Given the nature of the vulnerability, it is primarily an information disclosure risk rather than a direct code execution or denial of service threat.

Detailed information about CVE-2019-5747: n/a in n/a affecting n/a n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2019-5747: n/a in n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2019-5747: n/a in n/a

Threats Tagged 'cve-2019-5747'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2019-5747'

Lead Pen Test Professional