Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

CVE Database V5

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Bento4

Bento4 v1.6.0-640 was discovered to contain an out-of-memory bug via the AP4_UrlAtom::AP4_UrlAtom() function.

CVE-2024-25452 identifies an out-of-memory vulnerability in the Bento4 multimedia framework version 1.6.0-640, specifically within the constructor function AP4_UrlAtom::AP4_UrlAtom(). Bento4 is an open-source library widely used for parsing and processing MP4 files and related media containers. The vulnerability arises when the function improperly handles input data, leading to excessive memory allocation requests that can exhaust system memory resources. This condition can cause the affected application or service to crash or become unresponsive, resulting in a denial of service (DoS) condition. The vulnerability is classified under CWE-400 (Uncontrolled Resource Consumption), indicating that the software does not adequately limit resource usage. According to the CVSS v3.1 vector, the attack requires local access (AV:L), low attack complexity (AC:L), no privileges (PR:N), and user interaction (UI:R). The scope remains unchanged (S:U), and the impact affects only availability (A:H) without compromising confidentiality or integrity. There are no known exploits in the wild, and no patches have been officially released at the time of publication. The vulnerability is relevant for any deployment of Bento4 v1.6.0-640 where untrusted or malformed media files might be processed, potentially allowing attackers to trigger the out-of-memory condition by crafting malicious input files.

Detailed information about CVE-2024-25452: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-25452: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-25452: n/a

Threats Tagged 'cve-2024-25452'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2024-25452'

Lead Pen Test Professional