Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

AWS Security Bulletins

GCP Kubernetes Security

CERT/CC

Tenable Research

Microsoft Security Blog

Google Project Zero

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

A security update for PHP on Red Hat Enterprise Linux 9 addresses multiple vulnerabilities including cookie bypass, erroneous password verification, filter bypass, multipart form data parsing errors, configuration bypass, log manipulation, heap buffer over-read, single byte overread, and CRLF injection. These issues collectively pose moderate security risks such as account takeover and information leakage. The update fixes nine distinct CVEs and is rated with moderate severity by Red Hat Product Security.

This Red Hat security advisory covers a set of moderate-impact vulnerabilities in the PHP 8.2 module used in Red Hat Enterprise Linux 9. The fixed issues include CVE-2024-2756 (host/secure cookie bypass due to a partial fix of a previous vulnerability), CVE-2024-3096 (password_verify function erroneously returning true, risking account takeover), CVE-2024-5458 (filter bypass in filter_var with FILTER_VALIDATE_URL), CVE-2024-8925 (erroneous parsing of multipart form data), CVE-2024-8927 (bypass of cgi.force_redirect configuration via environment variable collision), and CVE-2024-9026 (PHP-FPM log manipulation vulnerability). Additional related vulnerabilities are also addressed in the update. Red Hat has provided patches for these issues in the PHP 8.2.25 update for RHEL 9, covering multiple architectures and extended update support versions.

Detailed information about Red Hat Security Advisory: php security update affecting Red Hat Product Security Red Hat. Get real-time updates, technical details, 

Red Hat Security Advisory: php security update - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2025:7315

https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/9.6_release_notes/index

https://access.redhat.com/security/updates/classification/#moderate

2275058

2275061

2291252

2317049

2317051

2317144

2327960

2328521

2328523

RHEL-71275

Canonical URL

https://access.redhat.com/errata/RHSA-2024:10949

RHEL-65837

https://access.redhat.com/errata/RHSA-2024:10950

Red Hat Security Advisory: php:8.1 security update

Due to an incomplete fix to  CVE-2022-31629 https://github.com/advisories/GHSA-c43m-486j-j32p , network and same-site attackers can set a standard insecure cookie in the victim's browser which is treated as a __Host- or __Secure- cookie by PHP applications.

CVE-2024-2756 is a vulnerability in the PHP language affecting versions 8.1.*, 8.2.*, and 8.3.*. It arises from an incomplete remediation of CVE-2022-31629, which involved improper input validation (CWE-20). The flaw allows attackers operating within the network or on the same site to set cookies that are insecure but are incorrectly accepted by PHP applications as __Host- or __Secure- cookies. These cookie prefixes are intended to enforce strict security policies: __Host- cookies must be set from a secure origin, have no Domain attribute, and use the Secure attribute; __Secure- cookies require the Secure attribute. By bypassing these checks, attackers can inject cookies that PHP treats as highly trusted, potentially enabling cookie poisoning or session fixation attacks. This compromises the integrity of cookie-based security mechanisms but does not directly expose confidential data or disrupt availability. Exploitation requires no privileges but does require user interaction, such as visiting a malicious site or interacting with a crafted request. No known exploits have been reported in the wild, and no official patches have been linked yet, indicating that remediation is pending. The vulnerability is scored 6.5 on the CVSS v3.1 scale, reflecting a medium severity level due to its impact on integrity and ease of exploitation without privileges. Organizations using affected PHP versions in web-facing applications should prioritize assessment and mitigation to prevent potential abuse.

Detailed information about CVE-2024-2756: CWE-20 Improper Input Validation in PHP Group PHP affecting PHP Group PHP. Get real-time updates, technical details, a

CVE-2024-2756: CWE-20 Improper Input Validation in PHP Group PHP - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-2756: CWE-20 Improper Input Validation in PHP Group PHP


Red Hat Security Advisory: php:8.1 security updateCVE-2024-2756 0 A security update for PHP on Red Hat Enterprise Linux 9 addresses multiple vulnerabilities including cookie bypass, erroneous password verification, filter bypass, multipart form data parsing errors, configuration bypass, log manipulation, heap buffer over-read, single byte overread, and CRLF injection. These issues collectively pose moderate security risks such as account takeover and information leakage. The update fixes nine distinct CVEs and is rated with moderate severity by Red Hat Product Security. MediumVulnerability#gcve #csaf #cve-2024-2756 Join the discussion	GCVE Database	12/11/2024, 16:20:57 UTC Added: 06/27/2026, 22:08:41 UTC
CVE-2024-2756: CWE-20 Improper Input Validation in PHP Group PHPCVE-2024-2756 0 Due to an incomplete fix to CVE-2022-31629 https://github.com/advisories/GHSA-c43m-486j-j32p , network and same-site attackers can set a standard insecure cookie in the victim's browser which is treated as a __Host- or __Secure- cookie by PHP applications. MediumVulnerabilityGermanyFranceUnited Kingdom+5#cve #cve-2024-2756 #cwe-20 Join the discussion	CVE Database V5	04/29/2024, 03:34:16 UTC Added: 11/04/2025, 17:44:09 UTC

Threats Tagged 'cve-2024-2756'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2024-2756'

Lead Pen Test Professional