Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

MiniDVBLinux 5.4 contains an authentication bypass vulnerability that allows remote attackers to change the root password without authentication. Attackers can send crafted POST requests to the system setup endpoint with modified SYSTEM_PASSWORD parameters to reset root credentials.

CVE-2023-53771 is an authentication bypass vulnerability identified in MiniDVBLinux version 5.4 and earlier. The vulnerability is classified under CWE-306, indicating missing authentication for a critical function. Specifically, the system setup endpoint responsible for changing the root password does not enforce any authentication checks, allowing remote attackers to send specially crafted POST requests with modified SYSTEM_PASSWORD parameters to reset the root credentials without any prior authentication. This flaw effectively grants attackers full administrative control over the affected device, enabling them to alter system configurations, install malicious software, or disrupt services. The vulnerability has a CVSS 4.0 score of 9.3, reflecting its critical severity due to network attack vector (AV:N), low attack complexity (AC:L), no privileges required (PR:N), no user interaction (UI:N), and high impact on confidentiality and integrity (VC:H, VI:H). The lack of authentication on such a sensitive function is a severe security oversight. Although no public exploits are currently known, the simplicity of exploitation and the critical nature of the vulnerability make it a high-risk issue. MiniDVBLinux is often used in embedded systems related to digital video broadcasting, which may be part of critical media infrastructure. Attackers exploiting this vulnerability could gain persistent root access, potentially compromising the confidentiality and integrity of broadcast content or disrupting availability. The vulnerability was published on December 9, 2025, and no patches or mitigations have been officially released yet, increasing the urgency for defensive measures.

Detailed information about CVE-2023-53771: CWE-306: Missing Authentication for Critical Function in MiniDVBLinux MiniDVBLinux Change Root Password PoC affecting

CVE-2023-53771: CWE-306: Missing Authentication for Critical Function in MiniDVBLinux MiniDVBLinux Change Root Password PoC - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2023-53771: CWE-306: Missing Authentication for Critical Function in MiniDVBLinux MiniDVBLinux Change Root Password PoC

Threats Tagged 'cve-2023-53771'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2023-53771'

Lead Pen Test Professional