Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

CIRCL OSINT Feed

ThreatFox MISP Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

An SSRF issue was discovered in Zoho Application Control Plus before version 10.0.511. The mail gateway configuration feature allows an attacker to perform a scan in order to discover open ports on a machine as well as available machines on the network segment on which the instance of the product is deployed.

CVE-2020-15594 is a Server-Side Request Forgery (SSRF) vulnerability identified in Zoho Application Control Plus versions prior to 10.0.511. The vulnerability arises from the mail gateway configuration feature, which improperly handles requests that allow an attacker to perform network reconnaissance from the perspective of the vulnerable application server. Specifically, an attacker can exploit this flaw to scan for open ports on the local machine hosting the application as well as discover other machines on the same network segment. This reconnaissance capability can provide attackers with valuable information about the internal network topology and services, potentially facilitating further attacks such as lateral movement or exploitation of other vulnerabilities. The vulnerability has a CVSS v3.1 base score of 4.3, indicating a medium severity level. The vector details show that the attack requires low privileges (PR:L), no user interaction (UI:N), and can be executed remotely (AV:N) with low complexity (AC:L). The impact is limited to confidentiality (C:L), with no direct impact on integrity or availability. No known exploits in the wild have been reported, and no patches or vendor advisories are linked in the provided data. The vulnerability's exploitation does not require user interaction but does require some level of authenticated access, which somewhat limits the attack surface. However, once exploited, it can provide attackers with internal network information that is typically not accessible externally, increasing the risk of subsequent attacks.

Detailed information about CVE-2020-15594: n/a in n/a affecting n/a n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2020-15594: n/a in n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2020-15594: n/a in n/a

Threats Tagged 'cve-2020-15594'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2020-15594'

Lead Pen Test Professional