Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Zero Day Initiative

Cisco Talos

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

The email module of Python through 3.11.3 incorrectly parses e-mail addresses that contain a special character. The wrong portion of an RFC2822 header is identified as the value of the addr-spec. In some applications, an attacker can bypass a protection mechanism in which application access is granted only after verifying receipt of e-mail to a specific domain (e.g., only @company.example.com addresses may be used for signup). This occurs in email/_parseaddr.py in recent versions of Python.

CVE-2023-27043 is a vulnerability in the Python standard library's email module, specifically in the _parseaddr.py component used up to Python version 3.11.3. The issue arises from incorrect parsing of email addresses that include special characters, leading to the misidentification of the addr-spec portion of an RFC2822 email header. RFC2822 defines the syntax for email messages, including the format of email addresses. The vulnerability allows an attacker to craft email addresses that exploit this parsing flaw to bypass domain-based verification mechanisms in applications. For example, applications that restrict access or signup to users with email addresses from a specific domain (e.g., @company.example.com) rely on the email module to validate the domain portion accurately. Due to the parsing error, an attacker can present a specially crafted email address that appears to belong to the allowed domain but is actually controlled by the attacker, thus circumventing these protections. The vulnerability is classified under CWE-20 (Improper Input Validation) and CWE-1286 (Improper Validation of Email Address). The CVSS v3.1 base score is 5.3 (medium severity), with vector AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N, indicating network attack vector, low attack complexity, no privileges or user interaction required, unchanged scope, no confidentiality or availability impact, but partial integrity impact. No public exploits have been reported, and no patches are currently linked, suggesting that mitigation may require workarounds or updates in future Python releases. This vulnerability primarily affects applications written in Python that rely on the standard email module for email address parsing and domain verification.

Detailed information about CVE-2023-27043: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2023-27043: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2023-27043: n/a

Threats Tagged 'cve-2023-27043'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2023-27043'

Lead Pen Test Professional