Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Microsoft Security Blog

Google Project Zero

Cisco Talos

Zero Day Initiative

Krebs on Security

Palo Alto Unit 42

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Malware

Reddit Reverse Engineering

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

A heap use-after-free vulnerability was found in systemd before version v245-rc1, where asynchronous Polkit queries are performed while handling dbus messages. A local unprivileged attacker can abuse this flaw to crash systemd services or potentially execute code and elevate their privileges, by sending specially crafted dbus messages.

CVE-2020-1712 is a high-severity heap use-after-free vulnerability (CWE-416) affecting systemd versions prior to v245-rc1. Systemd is a widely used system and service manager for Linux operating systems, responsible for initializing system components and managing system services. The vulnerability arises from the way systemd handles asynchronous Polkit queries during D-Bus message processing. Specifically, when systemd processes certain D-Bus messages, it performs asynchronous Polkit authorization queries. Due to improper memory management, a heap use-after-free condition can occur, allowing a local unprivileged attacker to send specially crafted D-Bus messages that trigger this flaw. Exploiting this vulnerability can lead to a crash of systemd services, causing denial of service, or potentially enable code execution with elevated privileges. This escalation could allow an attacker to gain root-level access on the affected system. The vulnerability requires local access and does not need user interaction, but the attack complexity is low given the direct interaction with D-Bus messages. The CVSS 3.1 base score is 7.8, reflecting high impact on confidentiality, integrity, and availability. No known exploits in the wild have been reported as of the publication date, but the potential for privilege escalation makes this a critical concern for Linux environments relying on vulnerable systemd versions.

Detailed information about CVE-2020-1712: CWE-416 in [UNKNOWN] systemd affecting [UNKNOWN] systemd. Get real-time updates, technical details, and mitigation str

CVE-2020-1712: CWE-416 in [UNKNOWN] systemd - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2020-1712: CWE-416 in [UNKNOWN] systemd

Threats Tagged 'cve-2020-1712'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2020-1712'

Lead Pen Test Professional