Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit NetSec

Reddit Cybersecurity

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

AWS Security Bulletins

GCP Kubernetes Security

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

uev (aka libuev) before 2.4.1 has a buffer overflow in epoll_wait if maxevents is a large number.

CVE-2022-48620 is a critical buffer overflow vulnerability identified in the libuev library (also known as uev) versions prior to 2.4.1. The vulnerability arises in the epoll_wait function when the maxevents parameter is set to a large number. Specifically, the buffer overflow occurs because the function does not properly handle or validate the size of the maxevents argument, leading to memory corruption. This type of vulnerability is classified under CWE-120, which pertains to classic buffer overflow issues. Exploiting this vulnerability can allow an unauthenticated remote attacker to execute arbitrary code, cause denial of service (DoS), or crash the affected application. The CVSS v3.1 base score is 9.8, indicating a critical severity with network attack vector (AV:N), low attack complexity (AC:L), no privileges required (PR:N), no user interaction needed (UI:N), and impacts on confidentiality, integrity, and availability (C:H/I:H/A:H). Although no known exploits are currently reported in the wild, the high severity score and ease of exploitation make this a significant threat. The vulnerability affects libuev, a lightweight event loop library commonly used in embedded systems, IoT devices, and some Linux-based applications for event-driven programming. Since the affected versions are prior to 2.4.1, users of older versions are at risk. The lack of vendor or product information suggests that the library is used as a component within other software rather than as a standalone product, which may complicate detection and patching efforts. No official patches or mitigation links are provided yet, indicating that users should monitor for updates or consider upgrading to version 2.4.1 or later once available.

Detailed information about CVE-2022-48620: n/a in n/a affecting n/a n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2022-48620: n/a in n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2022-48620: n/a in n/a

Threats Tagged 'cve-2022-48620'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2022-48620'

Lead Pen Test Professional