Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit NetSec

Reddit Cybersecurity

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

sqlite

A vulnerability was found in SQLite SQLite3 up to 3.43.0 and classified as critical. This issue affects the function sessionReadRecord of the file ext/session/sqlite3session.c of the component make alltest Handler. The manipulation leads to heap-based buffer overflow. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-248999.

CVE-2023-7104 identifies a heap-based buffer overflow vulnerability in SQLite3, a widely used embedded database engine, affecting all versions up to 3.43.0. The vulnerability resides in the sessionReadRecord function of the sqlite3session extension (file ext/session/sqlite3session.c), which is responsible for reading session records used in database synchronization and change tracking. The flaw arises from improper handling of input data leading to a heap overflow condition, classified under CWE-122. Exploitation requires an attacker to have low-level privileges and network access (AV:A, PR:L), but does not require user interaction (UI:N). Successful exploitation could lead to partial compromise of confidentiality, integrity, and availability of the affected system, such as unauthorized data disclosure, data corruption, or application crashes. The vulnerability has a CVSS v3.1 base score of 5.5, indicating medium severity. No public exploits or active exploitation campaigns have been reported to date. The recommended remediation is to apply patches provided by SQLite once available or upgrade to a fixed version beyond 3.43.0. Due to SQLite’s extensive use in embedded systems, mobile devices, and various applications, the vulnerability has broad potential impact. However, exploitation complexity and required privileges limit immediate widespread risk.

Detailed information about CVE-2023-7104: CWE-122 Heap-based Buffer Overflow in SQLite SQLite3 affecting SQLite SQLite3. Get real-time updates, technical detail

CVE-2023-7104: CWE-122 Heap-based Buffer Overflow in SQLite SQLite3 - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2023-7104: CWE-122 Heap-based Buffer Overflow in SQLite SQLite3

Threats Tagged 'cve-2023-7104'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2023-7104'

Lead Pen Test Professional