Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

CVE Database V5

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

The Login No Captcha reCAPTCHA WordPress plugin before 1.7 doesn't check the proper IP address allowing attackers to spoof IP addresses on the allow list and bypass the need for captcha on the login screen.

CVE-2022-2913 is a medium-severity vulnerability affecting the WordPress plugin 'Login No Captcha reCAPTCHA' versions prior to 1.7. The vulnerability arises from improper validation of the IP address used in the plugin's allow list feature. Specifically, the plugin fails to correctly verify the source IP address of login requests, allowing an attacker to spoof an IP address that is on the allow list. This spoofing enables the attacker to bypass the CAPTCHA challenge on the login screen, which is intended to prevent automated login attempts and brute-force attacks. The underlying weakness is categorized under CWE-639, 'Authorization Bypass Through User-Controlled Key,' indicating that the authorization logic relies on a user-controllable input (the IP address) that can be manipulated to bypass security controls. The vulnerability does not require authentication but does require user interaction in the form of attempting a login. Exploitation is network-based and relatively straightforward given the low attack complexity. The impact is limited to integrity, as attackers can bypass CAPTCHA protections but do not gain direct access or cause confidentiality or availability loss by this vulnerability alone. No known exploits have been reported in the wild, and no official patches are linked, suggesting that mitigation may require manual updates or configuration changes. The CVSS 3.1 base score is 4.3, reflecting a medium severity level due to the limited impact scope and the need for user interaction.

Detailed information about CVE-2022-2913: CWE-639 Authorization Bypass Through User-Controlled Key in Unknown Login No Captcha reCAPTCHA affecting Unknown Login

CVE-2022-2913: CWE-639 Authorization Bypass Through User-Controlled Key in Unknown Login No Captcha reCAPTCHA - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2022-2913: CWE-639 Authorization Bypass Through User-Controlled Key in Unknown Login No Captcha reCAPTCHA

Threats Tagged 'cve-2022-2913'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2022-2913'

Lead Pen Test Professional