Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

AWS Security Bulletins

GCP Kubernetes Security

CERT/CC

Tenable Research

Microsoft Security Blog

Google Project Zero

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Red Hat Satellite is a system management solution that allows organizations
to configure and maintain their systems without the necessity to provide
public Internet access to their servers or other client systems. It
performs provisioning and configuration management of predefined standard
operating environments.

Users of Red Hat Satellite are advised to upgrade to these updated
packages, which fix these bugs.

Red Hat Satellite 6.15.3 security update addresses five CVEs: CVE-2024-24680 (denial-of-service in Django's intcomma template filter), CVE-2024-27351 (potential regex denial-of-service in django.utils.text.Truncator.words()), CVE-2024-28219 (buffer overflow in python-pillow _imagingcms.c), CVE-2024-27306 (XSS in aiohttp static file handling index pages), and CVE-2024-34064 (jinja2 accepting keys with non-attribute characters). These vulnerabilities affect the system management solution that configures and maintains systems without requiring public Internet access. The update is rated moderate severity by Red Hat Product Security and fixes these issues in Red Hat Satellite 6.15 for RHEL 8.

Detailed information about Red Hat Security Advisory: Satellite 6.15.3 Security Update affecting Red Hat Product Security Red Hat. Get real-time updates, techni

Red Hat Security Advisory: Satellite 6.15.3 Security Update - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2024:5662

https://access.redhat.com/security/updates/classification/#moderate

https://access.redhat.com/documentation/en-us/red_hat_satellite/6.15/html/updating_red_hat_satellite/index

2261856

2266045

2272563

2275989

2279476

SAT-25063

SAT-25522

SAT-26450

SAT-26452

SAT-26453

SAT-26454

SAT-26456

SAT-26458

SAT-26459

Canonical URL

Red Hat Security Advisory: Satellite 6.15.3 Security Update

pillow

In _imagingcms.c in Pillow before 10.3.0, a buffer overflow exists because strcpy is used instead of strncpy.

CVE-2024-28219 describes a buffer overflow vulnerability in the _imagingcms.c source file of the Pillow image processing library prior to version 10.3.0. The flaw arises because the unsafe strcpy function is used instead of the safer strncpy, potentially allowing memory corruption. Red Hat has issued an advisory (RHSA-2024:4227) for python-pillow packages in Red Hat Enterprise Linux 8 and related distributions, providing updated packages that fix this issue. No CVSS score is provided, but the vendor rates the impact as moderate. There are no known exploits in the wild.

Detailed information about Red Hat Security Advisory: python-pillow security update affecting Red Hat Product Security Red Hat. Get real-time updates, technical

Red Hat Security Advisory: python-pillow security update - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2024:4227

In _imagingcms.c in Pillow before 10.3.0, a buffer overflow exists because strcpy is used instead of strncpy. (CVE-2024-28219)

CVE-2024-28219 identifies a buffer overflow vulnerability in the Pillow library, a widely used Python imaging library, specifically in the _imagingcms.c source file. The root cause is the use of the unsafe strcpy function, which does not limit the number of bytes copied, instead of the safer strncpy function that bounds the copy length. This programming error allows an attacker to overflow a buffer by supplying specially crafted image data, potentially leading to memory corruption. The vulnerability affects versions of Pillow prior to 10.3.0, although exact affected versions are not specified. The CVSS 3.1 base score is 6.7, indicating medium severity, with the vector string CVSS:3.1/AC:H/AV:L/A:H/C:H/I:H/PR:L/S:U/UI:R. This means the attack requires low privileges, local access, and user interaction, with high impact on availability, confidentiality, and integrity. No public exploits have been reported yet, but the vulnerability could be leveraged for denial of service or arbitrary code execution if exploited successfully. The CWE-680 classification corresponds to 'Integer Overflow to Buffer Overflow,' consistent with the strcpy misuse. The vulnerability is particularly relevant for applications that process untrusted image files using Pillow, such as web services, image processing pipelines, or desktop applications. Since Pillow is a common dependency in Python environments, the scope of affected systems is broad but limited by the need for local access and user interaction.

Detailed information about CVE-2024-28219: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-28219: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-28219: n/a


Red Hat Security Advisory: Satellite 6.15.3 Security UpdateCVE-2024-24680 0 Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without the necessity to provide public Internet access to their servers or other client systems. It performs provisioning and configuration management of predefined standard operating environments. Users of Red Hat Satellite are advised to upgrade to these updated packages, which fix these bugs. MediumVulnerability#gcve #csaf #cve-2024-24680 Join the discussion	GCVE Database	08/20/2024, 20:33:03 UTC Added: 06/02/2026, 21:44:02 UTC
In _imagingcms.c in Pillow before 10.3.0, a buffer overflow exists because strcpy is used instead of strncpy. (CVE-2024-28219)CVE-2024-28219 0 In _imagingcms.c in Pillow before 10.3.0, a buffer overflow exists because strcpy is used instead of strncpy. MediumVulnerability#gcve #csaf #cve-2024-28219 Join the discussion	GCVE Database	07/02/2024, 07:31:57 UTC Added: 06/02/2026, 21:44:02 UTC
CVE-2024-28219: n/aCVE-2024-28219 0 In _imagingcms.c in Pillow before 10.3.0, a buffer overflow exists because strcpy is used instead of strncpy. MediumVulnerabilityGermanyFranceUnited Kingdom+4#cve #cve-2024-28219 Join the discussion	CVE Database V5	04/03/2024, 00:00:00 UTC Added: 11/04/2025, 18:35:15 UTC

Threats Tagged 'cve-2024-28219'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2024-28219'

Lead Pen Test Professional