Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

openafs

A local user can bypass the OpenAFS PAG (Process Authentication Group) throttling mechanism in Unix clients, allowing the user to create a PAG using an existing id number, effectively joining the PAG and letting the user steal the credentials in that PAG.

CVE-2024-10394 is a vulnerability classified under CWE-305 (Authentication Bypass by Assumed-Immutable Data) affecting The OpenAFS Foundation's OpenAFS Unix clients. OpenAFS uses Process Authentication Groups (PAGs) to manage and isolate user credentials for authentication purposes. The throttling mechanism is intended to limit the creation of PAGs to prevent abuse. However, this vulnerability allows a local user to bypass this throttling by creating a PAG with an existing ID number, effectively joining an existing PAG. This means the attacker can assume the identity and credentials of another process group, enabling credential theft and unauthorized access to resources protected by those credentials. The vulnerability requires local access and user interaction but no prior authentication or elevated privileges, making it relatively easy to exploit in environments where multiple users have local access. The CVSS 4.0 score of 8.4 reflects the high impact on confidentiality and integrity, with low attack complexity and no need for privileges. Affected versions include 1.0, 1.8.0, and 1.9.0 of OpenAFS. No patches or known exploits are currently available, but the risk is significant due to the potential for credential theft and lateral movement within networks using OpenAFS for distributed file storage and authentication.

Detailed information about CVE-2024-10394: CWE-305 in The OpenAFS Foundation OpenAFS affecting The OpenAFS Foundation OpenAFS. Get real-time updates, technical 

CVE-2024-10394: CWE-305 in The OpenAFS Foundation OpenAFS - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-10394: CWE-305 in The OpenAFS Foundation OpenAFS

Threats Tagged 'cve-2024-10394'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2024-10394'

Lead Pen Test Professional