Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

shared-asset-booking-system

PHPJabbers Shared Asset Booking System v1.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file.

CVE-2023-51324 identifies a CSV Injection vulnerability in PHPJabbers Shared Asset Booking System version 1.0. The vulnerability stems from insufficient input validation in the Languages section Labels parameters within the System Options, which are used to construct CSV files. CSV Injection, also known as Formula Injection, occurs when untrusted input is embedded in CSV files without proper sanitization, allowing attackers to inject spreadsheet formulas or commands. When a victim opens the malicious CSV file in spreadsheet applications like Microsoft Excel or LibreOffice Calc, these formulas can execute arbitrary code or commands, potentially compromising the victim's system. The CVSS 3.1 base score of 6.5 reflects a medium severity, with an attack vector of network (remote exploitation), low attack complexity, no privileges required, and no user interaction needed. The vulnerability impacts confidentiality and integrity by enabling code execution through CSV files but does not affect availability. No patches or known exploits are currently available, indicating the vulnerability is newly disclosed. The CWE-94 classification (Improper Control of Generation of Code) aligns with the nature of code injection via CSV files. Organizations using this booking system should be aware that attackers can exploit this vulnerability remotely by submitting malicious input that gets exported into CSV reports, which when opened, trigger code execution on the user's machine.

Detailed information about CVE-2023-51324: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2023-51324: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2023-51324: n/a

Threats Tagged 'cve-2023-51324'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2023-51324'

Lead Pen Test Professional