Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

AlienVault OTX General

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit NetSec

Reddit Cybersecurity

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Red Hat Developer Hub (RHDH) is Red Hat's enterprise-grade, self-managed,
customizable developer portal based on Backstage.io.  RHDH is supported on
OpenShift and other major Kubernetes clusters (AKS, EKS, GKE). The core features
of RHDH include a single pane of glass, a centralized software catalog,
self-service via golden path templates, and Tech Docs. RHDH is extensible by
plugins.

CVE-2024-4067 is a vulnerability in the micromatch NPM package where the braces() function uses a regular expression pattern (.*) that causes excessive backtracking when processing crafted inputs. This leads to a Regular Expression Denial of Service (ReDoS) by consuming excessive CPU resources and potentially causing the application to hang or slow down. Red Hat identified this issue in their OpenShift Service Mesh containers and related products, issuing a security advisory and updates to address it. The vulnerability has a high severity rating by Red Hat with a CVSS v3 base score of 7.5 (Red Hat's scoring) due to the potential for denial of service via resource exhaustion. No active exploits have been reported. Red Hat's advisory notes that mitigation without patching is not currently feasible or stable, emphasizing the need to apply the provided updates.

Detailed information about Red Hat Bug Fix Advisory: Red Hat Developer Hub 1.3.0 release affecting Red Hat Product Security Red Hat. Get real-time updates, tech

Red Hat Bug Fix Advisory: Red Hat Developer Hub 1.3.0 release - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2025:23225

https://access.redhat.com/documentation/en-us/red_hat_openshift_dev_spaces/3.25/html/administration_guide/installing-devspaces

https://access.redhat.com/security/cve/CVE-2024-4067

https://access.redhat.com/security/cve/CVE-2025-55247

https://access.redhat.com/security/cve/CVE-2025-55248

https://access.redhat.com/security/cve/CVE-2025-55315

https://access.redhat.com/security/cve/CVE-2025-55752

https://access.redhat.com/security/cve/CVE-2025-61927

https://access.redhat.com/security/cve/CVE-2025-66516

https://access.redhat.com/security/updates/classification/

Canonical URL

https://access.redhat.com/errata/RHSA-2024:6211

https://access.redhat.com/security/updates/classification/#important

OSSM-6857

OSSM-8006

https://access.redhat.com/errata/RHBA-2024:7523

https://docs.redhat.com/en/documentation/red_hat_developer_hub/1.3

RHIDP-3725

https://access.redhat.com/errata/RHSA-2024:8906

https://access.redhat.com/security/updates/classification/#critical

2280601

2292788

2293200

2295935

2295936

2295937

2295938

2296413

2299429

2302436

2305718

2312524

2318080

SAT-12847

SAT-15089

SAT-15466

SAT-15467

SAT-15549

Red Hat Bug Fix Advisory: Red Hat Developer Hub 1.3.0 release

dset

Versions of the package dset before 3.1.4 are vulnerable to Prototype Pollution via the dset function due improper user input sanitization. This vulnerability allows the attacker to inject malicious object property using the built-in Object property __proto__, which is recursively assigned to all the objects in the program.

CVE-2024-21529 describes a prototype pollution vulnerability in the dset package affecting all versions prior to 3.1.4. The vulnerability arises from improper sanitization of user input in the dset function, enabling attackers to inject malicious properties using the built-in Object property __proto__. This injection recursively affects all objects in the program, which can lead to unexpected behavior or security issues. The CVSS 4.0 base score is 8.8, indicating a high severity with network attack vector, no privileges or user interaction required, and high impact on integrity.

Detailed information about CVE-2024-21529: Prototype Pollution in dset affecting null dset. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-21529: Prototype Pollution in dset - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-21529: Prototype Pollution in dset


Red Hat Bug Fix Advisory: Red Hat Developer Hub 1.3.0 releaseCVE-2024-4067 0 Red Hat Developer Hub (RHDH) is Red Hat's enterprise-grade, self-managed, customizable developer portal based on Backstage.io. RHDH is supported on OpenShift and other major Kubernetes clusters (AKS, EKS, GKE). The core features of RHDH include a single pane of glass, a centralized software catalog, self-service via golden path templates, and Tech Docs. RHDH is extensible by plugins. HighVulnerability#gcve #csaf #cve-2024-4067 Join the discussion	GCVE Database	10/02/2024, 15:29:03 UTC Added: 06/01/2026, 21:15:21 UTC
CVE-2024-21529: Prototype Pollution in dsetCVE-2024-21529 0 Versions of the package dset before 3.1.4 are vulnerable to Prototype Pollution via the dset function due improper user input sanitization. This vulnerability allows the attacker to inject malicious object property using the built-in Object property __proto__, which is recursively assigned to all the objects in the program. HighVulnerability#cve #cve-2024-21529 Join the discussion	CVE Database V5	09/11/2024, 05:00:01 UTC Added: 07/14/2026, 15:48:15 UTC

Threats Tagged 'cve-2024-21529'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2024-21529'

Lead Pen Test Professional