Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

CVE Database V5

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Varnish Cache is a high-performance HTTP accelerator. It stores web pages in memory so web servers don't have to create the same web page over and over again, giving the website a significant speed up.

Security Fix(es):

* HTTP/2 Broken Window Attack may result in denial of service (CVE-2024-30156)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2024-30156 is a denial of service vulnerability in Varnish Cache related to an HTTP/2 Broken Window Attack. Varnish Cache accelerates web servers by caching web pages in memory. This vulnerability could allow an attacker to cause a denial of service condition. Red Hat released an update (varnish-6.6.2-3.el9_2.2) for multiple Red Hat Enterprise Linux 9.2 Extended Update Support variants to fix this issue. The advisory references Red Hat's errata RHSA-2024:2820 and provides packages for x86_64, s390x, ppc64le, and aarch64 architectures. No CVSS score is provided in the advisory.

Detailed information about Red Hat Security Advisory: varnish security update affecting Red Hat Product Security Red Hat. Get real-time updates, technical detai

Red Hat Security Advisory: varnish security update - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2024:1689

https://access.redhat.com/security/updates/classification/#important

2271486

Canonical URL

Red Hat Security Advisory: rh-varnish6-varnish security update

varnish-cache

Varnish Cache before 7.3.2 and 7.4.x before 7.4.3 (and before 6.0.13 LTS), and Varnish Enterprise 6 before 6.0.12r6, allows credits exhaustion for an HTTP/2 connection control flow window, aka a Broke Window Attack.

CVE-2024-30156 is a vulnerability classified under CWE-770 (Allocation of Resources Without Limits or Throttling) that affects Varnish Cache and Varnish Enterprise HTTP accelerators. The issue arises from improper management of the HTTP/2 connection control flow window credits, which are used to regulate the amount of data that can be sent before receiving further permission from the receiver. An attacker can exploit this by sending crafted HTTP/2 traffic that exhausts these credits, effectively blocking further legitimate data transmission on the connection. This results in a denial of service condition, as the server becomes unable to process additional HTTP/2 requests or responses on affected connections. The vulnerability impacts multiple versions of Varnish Cache prior to 7.3.2, 7.4.x prior to 7.4.3, and the 6.0.13 LTS release, as well as Varnish Enterprise 6 before 6.0.12r6. The CVSS v3.1 score of 7.5 reflects a high severity due to the network attack vector, lack of required privileges or user interaction, and the significant impact on availability. No confidentiality or integrity impact is noted. Although no public exploits have been reported yet, the nature of the vulnerability makes it a plausible target for denial of service attacks against web infrastructure relying on Varnish as a caching or reverse proxy layer.

Detailed information about CVE-2024-30156: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-30156: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-30156: n/a


Red Hat Security Advisory: rh-varnish6-varnish security updateCVE-2024-30156 0 Varnish Cache is a high-performance HTTP accelerator. It stores web pages in memory so web servers don't have to create the same web page over and over again, giving the website a significant speed up. Security Fix(es): * HTTP/2 Broken Window Attack may result in denial of service (CVE-2024-30156) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. HighVulnerability#gcve #csaf #cve-2024-30156 Join the discussion	GCVE Database	04/08/2024, 08:47:32 UTC Added: 06/25/2026, 21:47:35 UTC
CVE-2024-30156: n/aCVE-2024-30156 0 Varnish Cache before 7.3.2 and 7.4.x before 7.4.3 (and before 6.0.13 LTS), and Varnish Enterprise 6 before 6.0.12r6, allows credits exhaustion for an HTTP/2 connection control flow window, aka a Broke Window Attack. HighVulnerabilityUnited StatesGermanyUnited Kingdom+7#cve #cve-2024-30156 Join the discussion	CVE Database V5	03/24/2024, 00:00:00 UTC Added: 02/25/2026, 21:46:36 UTC

Threats Tagged 'cve-2024-30156'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2024-30156'

Lead Pen Test Professional