Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

An issue was discovered in SolaX Pocket WiFi 3 through 3.001.02. The device provides a WiFi access point for initial configuration. The WiFi network provided has no network authentication (such as an encryption key) and persists permanently, including after enrollment and setup is complete. The WiFi network serves a web-based configuration utility, as well as an unauthenticated ModBus protocol interface.

CVE-2023-35835 is a critical vulnerability affecting the SolaX Pocket WiFi 3 device, versions up to 3.001.02. This device is designed to provide a WiFi access point primarily for initial configuration purposes. However, the vulnerability arises because the WiFi network it broadcasts is permanently open—lacking any form of network authentication such as WPA2/WPA3 encryption keys. This open network remains active even after the device has been enrolled and setup is complete, which is a significant security oversight. The exposed WiFi network hosts a web-based configuration utility and an unauthenticated ModBus protocol interface. ModBus is a communication protocol commonly used in industrial environments for supervisory control and data acquisition (SCADA) systems. The absence of authentication on these interfaces means that any attacker within wireless range can connect to the device, access the configuration utility, and interact with the ModBus interface without restriction. This can lead to unauthorized configuration changes, data theft, or disruption of device operation. The vulnerability has a CVSS 3.1 base score of 9.8, indicating critical severity, with attack vector being network (remote), no privileges or user interaction required, and impacts on confidentiality, integrity, and availability all rated high. Although no known exploits in the wild have been reported yet, the ease of exploitation and the critical impact make this a significant threat. The lack of vendor or product-specific details beyond the device name limits the scope of direct vendor mitigation guidance, but the technical nature of the vulnerability is clear and straightforward.

Detailed information about CVE-2023-35835: n/a in n/a affecting n/a n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2023-35835: n/a in n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2023-35835: n/a in n/a

Threats Tagged 'cve-2023-35835'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2023-35835'

Lead Pen Test Professional