Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

diffoscope before 256 allows directory traversal via an embedded filename in a GPG file. Contents of any file, such as ../.ssh/id_rsa, may be disclosed to an attacker. This occurs because the value of the gpg --use-embedded-filenames option is trusted.

CVE-2024-25711 is a directory traversal vulnerability identified in diffoscope, a tool used for in-depth comparison of files, archives, and directories. The flaw exists in versions prior to 256 and stems from the handling of embedded filenames within GPG files. Specifically, diffoscope relies on the gpg --use-embedded-filenames option, which is trusted without proper validation. An attacker can embed filenames containing directory traversal sequences (e.g., ../) inside a crafted GPG file. When diffoscope processes this file, it inadvertently accesses and discloses contents of arbitrary files on the system, such as ~/.ssh/id_rsa private keys or other sensitive data. The vulnerability is classified under CWE-22 (Improper Limitation of a Pathname to a Restricted Directory). Exploitation requires local access with low privileges (AV:L), low attack complexity (AC:L), and privileges (PR:L), but no user interaction (UI:N). The impact on confidentiality and integrity is high, as sensitive files can be read and potentially manipulated. Availability is not affected. No patches or exploits are currently publicly available, but the risk is significant given the sensitive nature of data exposed. Diffoscope is commonly used in software development, packaging, and security auditing, making this vulnerability relevant to organizations relying on these workflows.

Detailed information about CVE-2024-25711: n/a in n/a affecting n/a n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-25711: n/a in n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-25711: n/a

Threats Tagged 'cve-2024-25711'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2024-25711'

Lead Pen Test Professional