Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Multilaser RE160 v5.07.51_pt_MTL01 and v5.07.52_pt_MTL01, Multilaser RE160V v12.03.01.08_pt and V12.03.01.09_pt, and Multilaser RE163V v12.03.01.08_pt allows attackers to bypass the access control and gain complete access to the application via supplying a crafted URL.

CVE-2023-38945 is a critical access control vulnerability identified in several firmware versions of Multilaser RE160 and RE163V devices. These devices, commonly used in networking or IoT contexts, contain a flaw that allows attackers to bypass authentication controls by crafting specific URLs. This bypass grants attackers complete access to the application interface, enabling them to manipulate device settings, extract sensitive data, or disrupt device functionality. The vulnerability is classified under CWE-284, indicating improper access control implementation. The CVSS 3.1 base score of 8.8 reflects a high severity due to the vulnerability's remote attack vector (AV:A - adjacent network), low attack complexity (AC:L), no privileges required (PR:N), and no user interaction needed (UI:N). The impact covers confidentiality, integrity, and availability, meaning attackers can fully compromise the device and its data. Although no public exploits are currently known, the vulnerability's characteristics suggest it could be weaponized easily once exploit code is developed. The lack of available patches at the time of reporting increases the urgency for defensive measures. Organizations should monitor network traffic for anomalous URL requests targeting these devices and restrict access to trusted networks. Given the device versions affected, it is likely these are embedded in specific environments, possibly including home or small business networks, but also potentially in industrial or critical infrastructure settings where Multilaser products are deployed.

Detailed information about CVE-2023-38945: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2023-38945: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2023-38945: n/a

Threats Tagged 'cve-2023-38945'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2023-38945'

Lead Pen Test Professional