Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Krebs on Security

Palo Alto Unit 42

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

In applyRemoteView of NotificationContentInflater.java, there is a possible way to hide foreground service notification due to misleading or insufficient UI. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-251586912

CVE-2023-21237 is a vulnerability identified in Android 13 within the NotificationContentInflater.java component, specifically in the applyRemoteView method. The flaw allows a foreground service notification to be hidden due to misleading or insufficient user interface rendering. Foreground service notifications are critical for informing users about ongoing background tasks that require their awareness. By hiding these notifications, an attacker with local access can obscure the presence of certain services, potentially leading to unauthorized information disclosure. The vulnerability does not require any additional execution privileges or user interaction, meaning an attacker with local access can exploit it silently. The core issue relates to CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), indicating that sensitive data may be exposed without proper authorization. The CVSS v3.1 score is 6.2 (medium severity), reflecting the local attack vector (AV:L), low attack complexity (AC:L), no privileges required (PR:N), no user interaction (UI:N), unchanged scope (S:U), high confidentiality impact (C:H), and no impact on integrity or availability (I:N/A:N). Although no known exploits are reported in the wild, the vulnerability poses a risk to confidentiality on affected devices. Since Android 13 is the only affected version, the scope is limited to relatively recent devices. This vulnerability could be leveraged by malicious apps or local attackers to hide their presence and access sensitive information without alerting the user, undermining trust in notification mechanisms.

Detailed information about CVE-2023-21237: Information disclosure in Android affecting null Android. Get real-time updates, technical details, and mitigation st

CVE-2023-21237: Information disclosure in Android - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2023-21237: Information disclosure in Android

Threats Tagged 'cve-2023-21237'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2023-21237'

Lead Pen Test Professional