Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

freeipa

A moderate severity vulnerability (CVE-2024-1481) in Red Hat Identity Management (IdM) affects the freeipa component, where specially crafted HTTP requests can potentially cause a denial of service. This vulnerability impacts Red Hat Enterprise Linux 9 and related variants. Red Hat has issued a security advisory (RHSA-2024:2147) with an update to address this issue. The advisory includes instructions for applying the update and references the Red Hat Enterprise Linux 9.4 release notes for additional changes.

CVE-2024-1481 is a denial of service vulnerability in the freeipa component of Red Hat Identity Management (IdM). The flaw is triggered by specially crafted HTTP requests that may cause the service to become unavailable. Red Hat has released an update for Red Hat Enterprise Linux 9.4 and its extended update support variants to fix this issue. The vulnerability is categorized under CWE-20 (Improper Input Validation). No CVSS score is provided in the advisory, but the vendor rates the impact as moderate.

Detailed information about Red Hat Security Advisory: ipa security update affecting Red Hat Product Security Red Hat. Get real-time updates, technical details, 

Red Hat Security Advisory: ipa security update - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2024:2147

https://access.redhat.com/security/updates/classification/#moderate

https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.4_release_notes/index

2262169

RHEL-11652

RHEL-14292

RHEL-14428

RHEL-14842

RHEL-15443

RHEL-15444

RHEL-16985

RHEL-21059

RHEL-21804

RHEL-21810

RHEL-21811

RHEL-21812

RHEL-21937

RHEL-22372

RHEL-23621

RHEL-23625

Red Hat Security Advisory: ipa security update

A flaw was found in FreeIPA. This issue may allow a remote attacker to craft a HTTP request with parameters that can be interpreted as command arguments to kinit on the FreeIPA server, which can lead to a denial of service.

CVE-2024-1481 is a vulnerability discovered in FreeIPA version 4.10.1 that stems from improper input validation of HTTP request parameters. FreeIPA is an integrated identity and authentication solution that uses Kerberos for authentication, with kinit being a key utility to obtain and cache Kerberos tickets. The flaw allows a remote attacker to craft a malicious HTTP request containing parameters that the FreeIPA server incorrectly interprets as command-line arguments to the kinit process. By manipulating these parameters, the attacker can cause the kinit process to behave unexpectedly, leading to a denial of service condition on the FreeIPA server. This could manifest as service crashes, resource exhaustion, or other disruptions that prevent legitimate authentication requests from being processed. The vulnerability is remotely exploitable without requiring any authentication or user interaction, increasing its risk profile. However, it does not allow for unauthorized access, data leakage, or privilege escalation, as it only impacts availability. No known public exploits have been reported, and no patches or mitigations were linked in the provided data, indicating that organizations should monitor vendor advisories closely. The CVSS v3.1 base score of 5.3 reflects the medium severity, with attack vector network (AV:N), low attack complexity (AC:L), no privileges required (PR:N), no user interaction (UI:N), and impact limited to availability (A:L).

Detailed information about CVE-2024-1481: Improper Input Validation. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-1481: Improper Input Validation - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-1481: Improper Input Validation


Red Hat Security Advisory: ipa security updateCVE-2024-1481 0 A moderate severity vulnerability (CVE-2024-1481) in Red Hat Identity Management (IdM) affects the freeipa component, where specially crafted HTTP requests can potentially cause a denial of service. This vulnerability impacts Red Hat Enterprise Linux 9 and related variants. Red Hat has issued a security advisory (RHSA-2024:2147) with an update to address this issue. The advisory includes instructions for applying the update and references the Red Hat Enterprise Linux 9.4 release notes for additional changes. MediumVulnerability#gcve #csaf #cve-2024-1481 Join the discussion	GCVE Database	04/30/2024, 10:36:37 UTC Added: 06/25/2026, 21:47:37 UTC
CVE-2024-1481: Improper Input ValidationCVE-2024-1481 0 A flaw was found in FreeIPA. This issue may allow a remote attacker to craft a HTTP request with parameters that can be interpreted as command arguments to kinit on the FreeIPA server, which can lead to a denial of service. MediumVulnerabilityUnited StatesGermanyIndia+7#cve #cve-2024-1481 Join the discussion	CVE Database V5	04/10/2024, 20:39:31 UTC Added: 11/04/2025, 18:34:48 UTC

Threats Tagged 'cve-2024-1481'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2024-1481'

Lead Pen Test Professional