Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit NetSec

Reddit Cybersecurity

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

Bleeping Computer

GCVE Database

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

XStream is software for serializing Java objects to XML and back again. A vulnerability in XStream versions prior to 1.4.17 may allow a remote attacker has sufficient rights to execute commands of the host only by manipulating the processed input stream. No user who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types is affected. The vulnerability is patched in version 1.4.17.

CVE-2021-29505 is a high-severity vulnerability affecting versions of the XStream library prior to 1.4.17. XStream is a widely used Java library that serializes objects to XML and deserializes XML back into Java objects. The vulnerability is classified under CWE-94 (Improper Control of Generation of Code, commonly known as code injection) and CWE-502 (Deserialization of Untrusted Data). It arises because XStream processes XML input streams without sufficient validation or restriction, allowing an attacker with limited privileges to craft malicious XML payloads that, when deserialized, can execute arbitrary code on the host system. This can lead to full compromise of the affected system. The vulnerability requires that the attacker has some level of access to supply input to the deserialization process but does not require user interaction. The risk is mitigated if the application using XStream has implemented a strict security framework whitelist limiting deserialization to minimal required types. The vulnerability was patched in XStream version 1.4.17, which introduced improved security controls to prevent unsafe deserialization. The CVSS v3.1 score is 7.5, reflecting a high impact on confidentiality, integrity, and availability, with network attack vector, low privileges required, and no user interaction needed. No known exploits in the wild have been reported as of the publication date, but the potential for remote code execution makes this a critical concern for applications relying on vulnerable XStream versions.

Detailed information about CVE-2021-29505: CWE-94: Improper Control of Generation of Code ('Code Injection') in x-stream xstream affecting x-stream xstream. Get

CVE-2021-29505: CWE-94: Improper Control of Generation of Code ('Code Injection') in x-stream xstream - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2021-29505: CWE-94: Improper Control of Generation of Code ('Code Injection') in x-stream xstream

Threats Tagged 'cve-2021-29505'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2021-29505'

Lead Pen Test Professional