Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit NetSec

Reddit Cybersecurity

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

AWS Security Bulletins

GCP Kubernetes Security

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Red Hat OpenShift Dev Spaces provides a cloud developer workspace server and a browser-based IDE built for teams and organizations. Dev Spaces runs in OpenShift and is well-suited for container-based development. The 3.23 release is based on Eclipse Che 7.107 and uses the DevWorkspace engine to provide support for workspaces based on devfile v2.1 and v2.2. Users still using the v1 standard should migrate as soon as possible. https://devfile.io/docs/2.2.0/migrating-to-devfile-v2 Dev Spaces supports OpenShift EUS releases v4.14 and higher. Users are expected to update to supported OpenShift releases in order to continue to get Dev Spaces updates. https://access.redhat.com/support/policy/updates/openshift#crw

The Red Hat OpenShift Dev Spaces 3.23.0 release provides an updated cloud developer workspace environment based on Eclipse Che 7.107 and the DevWorkspace engine supporting devfile v2.1 and v2.2. The advisory mentions CVE-2024-10005, a vulnerability in HashiCorp Consul due to lack of path normalization in L7 traffic intentions that could allow permission bypass. Red Hat's analysis clarifies that although the product includes affected components, their implementation does not use Consul/Consul Catalog for configuration discovery in Traefik Proxy, rendering the product not vulnerable to this issue. No patches or fixes for this CVE are included or required in this release. The advisory also lists multiple other CVEs but does not specify fixes for them in this release. Users should migrate from devfile v1 to v2 and maintain supported OpenShift versions to receive updates.

Detailed information about Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.23.0 Release. affecting Red Hat Product Security Red Hat. Get real-time upd

Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.23.0 Release. - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2025:15847

https://access.redhat.com/documentation/en-us/red_hat_openshift_dev_spaces/3.23/html/administration_guide/installing-devspaces

https://access.redhat.com/security/cve/CVE-2024-10005

https://access.redhat.com/security/cve/CVE-2024-10006

https://access.redhat.com/security/cve/CVE-2024-22189

https://access.redhat.com/security/cve/CVE-2024-24789

https://access.redhat.com/security/cve/CVE-2024-28869

https://access.redhat.com/security/cve/CVE-2024-39321

https://access.redhat.com/security/cve/CVE-2024-45338

https://access.redhat.com/security/cve/CVE-2025-48385

https://access.redhat.com/security/cve/CVE-2025-48387

https://access.redhat.com/security/cve/CVE-2025-52999

https://access.redhat.com/security/cve/CVE-2025-9287

https://access.redhat.com/security/cve/CVE-2025-9288

https://access.redhat.com/security/updates/classification/

Canonical URL

Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.23.0 Release.

consul

A vulnerability in Consul and Consul Enterprise allows bypassing HTTP header-based access rules when using Headers in Layer 7 traffic intentions. This issue affects versions from 1.9.0 up to but not including 1.20.1. The vulnerability is classified as medium severity. A patch is available to address this issue.

CVE-2024-10006 is a vulnerability in Consul and Consul Enterprise where the use of HTTP Headers in Layer 7 traffic intentions can be bypassed, allowing unauthorized access by circumventing header-based access control rules. This flaw affects Consul versions >=1.9.0 and <1.20.1. No CVSS score is provided, but the severity is rated medium. There are no known exploits in the wild. A patch is available to remediate this vulnerability.

Detailed information about Consul L7 Intentions Vulnerable To Headers Bypass (CVE-2024-10006) affecting null consul. Get real-time updates, technical details, a

Consul L7 Intentions Vulnerable To Headers Bypass (CVE-2024-10006) - Live Threat Intelligence - Threat Radar | OffSeq.com

Consul L7 Intentions Vulnerable To Headers Bypass (CVE-2024-10006)


Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.23.0 Release.CVE-2024-10005 0 Red Hat OpenShift Dev Spaces provides a cloud developer workspace server and a browser-based IDE built for teams and organizations. Dev Spaces runs in OpenShift and is well-suited for container-based development. The 3.23 release is based on Eclipse Che 7.107 and uses the DevWorkspace engine to provide support for workspaces based on devfile v2.1 and v2.2. Users still using the v1 standard should migrate as soon as possible. https://devfile.io/docs/2.2.0/migrating-to-devfile-v2 Dev Spaces supports OpenShift EUS releases v4.14 and higher. Users are expected to update to supported OpenShift releases in order to continue to get Dev Spaces updates. https://access.redhat.com/support/policy/updates/openshift#crw HighVulnerability#gcve #csaf #cve-2024-10005 Join the discussion	GCVE Database	09/15/2025, 16:27:40 UTC Added: 05/28/2026, 22:15:03 UTC
Consul L7 Intentions Vulnerable To Headers Bypass (CVE-2024-10006)CVE-2024-10006 0 A vulnerability in Consul and Consul Enterprise allows bypassing HTTP header-based access rules when using Headers in Layer 7 traffic intentions. This issue affects versions from 1.9.0 up to but not including 1.20.1. The vulnerability is classified as medium severity. A patch is available to address this issue. MediumVulnerability#gcve #osv #bit-consul-2024-10006 Join the discussion	GCVE Database	11/01/2024, 07:07:54 UTC Added: 08/24/2026, 13:51:43 UTC

Threats Tagged 'cve-2024-10006'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2024-10006'

Lead Pen Test Professional