Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Malware

Reddit Reverse Engineering

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Screen SFT DAB 600/C firmware versions up to and including 1.9.3 contain an improper access control on the user management API allows unauthenticated requests to retrieve structured user data, including account names and connection metadata such as client IP and timeout values.

CVE-2023-7328 identifies a missing authentication vulnerability (CWE-306) in the Screen SFT DAB 600/C device firmware versions up to 1.9.3, produced by DB Elettronica Telecomunicazioni SpA. The flaw resides in the user management API, which improperly permits unauthenticated requests to access structured user data. This data includes account names and connection metadata such as client IP addresses and session timeout values. The vulnerability is remotely exploitable without any authentication or user interaction, as indicated by the CVSS vector (AV:N/AC:L/AT:N/UI:N/PR:N). The CVSS score of 6.9 (medium severity) reflects the moderate impact on confidentiality due to information disclosure, with no direct impact on integrity or availability. Although no patches or exploits are currently documented, the exposure of user account details and network metadata can aid attackers in reconnaissance, potentially leading to more sophisticated attacks like credential stuffing, lateral movement, or targeted intrusions. The device is commonly used in telecommunications environments, where protecting user credentials and network metadata is critical. The lack of authentication on a critical function represents a significant security design flaw that must be addressed to prevent unauthorized data leakage.

Detailed information about CVE-2023-7328: CWE-306 Missing Authentication for Critical Function in DB Elettronica Telecomunicazioni SpA Screen SFT DAB 600/C affe

CVE-2023-7328: CWE-306 Missing Authentication for Critical Function in DB Elettronica Telecomunicazioni SpA Screen SFT DAB 600/C - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2023-7328: CWE-306 Missing Authentication for Critical Function in DB Elettronica Telecomunicazioni SpA Screen SFT DAB 600/C

Threats Tagged 'cve-2023-7328'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2023-7328'

Lead Pen Test Professional