Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

AWS Security Bulletins

GCP Kubernetes Security

CERT/CC

Tenable Research

Microsoft Security Blog

Google Project Zero

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

A security update for PHP on Red Hat Enterprise Linux 9 addresses multiple vulnerabilities including cookie bypass, erroneous password verification, filter bypass, multipart form data parsing errors, configuration bypass, log manipulation, heap buffer over-read, single byte overread, and CRLF injection. These issues collectively pose moderate security risks such as account takeover and information leakage. The update fixes nine distinct CVEs and is rated with moderate severity by Red Hat Product Security.

This Red Hat security advisory covers a set of moderate-impact vulnerabilities in the PHP 8.2 module used in Red Hat Enterprise Linux 9. The fixed issues include CVE-2024-2756 (host/secure cookie bypass due to a partial fix of a previous vulnerability), CVE-2024-3096 (password_verify function erroneously returning true, risking account takeover), CVE-2024-5458 (filter bypass in filter_var with FILTER_VALIDATE_URL), CVE-2024-8925 (erroneous parsing of multipart form data), CVE-2024-8927 (bypass of cgi.force_redirect configuration via environment variable collision), and CVE-2024-9026 (PHP-FPM log manipulation vulnerability). Additional related vulnerabilities are also addressed in the update. Red Hat has provided patches for these issues in the PHP 8.2.25 update for RHEL 9, covering multiple architectures and extended update support versions.

Detailed information about Red Hat Security Advisory: php security update affecting Red Hat Product Security Red Hat. Get real-time updates, technical details, 

Red Hat Security Advisory: php security update - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2025:7315

https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/9.6_release_notes/index

https://access.redhat.com/security/updates/classification/#moderate

2275058

2275061

2291252

2317049

2317051

2317144

2327960

2328521

2328523

RHEL-71275

Canonical URL

https://access.redhat.com/errata/RHSA-2024:10949

RHEL-65837

https://access.redhat.com/errata/RHSA-2024:10950

Red Hat Security Advisory: php:8.1 security update

php-src

In PHP  version 8.1.* before 8.1.28, 8.2.* before 8.2.18, 8.3.* before 8.3.5, if a password stored with password_hash() starts with a null byte (\x00), testing a blank string as the password via password_verify() will incorrectly return true.

CVE-2024-3096 is a vulnerability in the PHP language's password verification mechanism affecting versions 8.1.* before 8.1.28, 8.2.* before 8.2.18, and 8.3.* before 8.3.5. The issue arises when a password hash generated by password_hash() starts with a null byte (\x00). Under these conditions, calling password_verify() with an empty string as the password incorrectly returns true, effectively bypassing authentication. This is due to improper input validation (CWE-20) in the password verification logic, where the presence of a null byte at the start of the stored hash causes the function to misinterpret the input, leading to a false positive match. The vulnerability allows an attacker to authenticate as any user whose password hash begins with a null byte without knowing the actual password. Exploitation requires no privileges but does require the attacker to interact with the authentication mechanism, typically by submitting a blank password during login. The vulnerability impacts confidentiality by allowing unauthorized access but does not affect data integrity or system availability. No public exploits have been reported yet, but the vulnerability has a CVSS 3.1 base score of 6.5 (medium severity), reflecting the ease of remote exploitation and the potential impact on sensitive data. The flaw affects a broad range of PHP versions widely deployed in web applications globally, including many European organizations. The root cause is improper input validation in the password verification function, which can be mitigated by updating PHP to patched versions where this logic is corrected.

Detailed information about CVE-2024-3096: CWE-20 Improper Input Validation in PHP Group PHP affecting PHP Group PHP. Get real-time updates, technical details, a

CVE-2024-3096: CWE-20 Improper Input Validation in PHP Group PHP - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-3096: CWE-20 Improper Input Validation in PHP Group PHP


Red Hat Security Advisory: php:8.1 security updateCVE-2024-2756 0 A security update for PHP on Red Hat Enterprise Linux 9 addresses multiple vulnerabilities including cookie bypass, erroneous password verification, filter bypass, multipart form data parsing errors, configuration bypass, log manipulation, heap buffer over-read, single byte overread, and CRLF injection. These issues collectively pose moderate security risks such as account takeover and information leakage. The update fixes nine distinct CVEs and is rated with moderate severity by Red Hat Product Security. MediumVulnerability#gcve #csaf #cve-2024-2756 Join the discussion	GCVE Database	12/11/2024, 16:20:57 UTC Added: 06/27/2026, 22:08:41 UTC
CVE-2024-3096: CWE-20 Improper Input Validation in PHP Group PHPCVE-2024-3096 0 In PHP version 8.1.* before 8.1.28, 8.2.* before 8.2.18, 8.3.* before 8.3.5, if a password stored with password_hash() starts with a null byte (\x00), testing a blank string as the password via password_verify() will incorrectly return true. MediumVulnerabilityGermanyFranceUnited Kingdom+5#cve #cve-2024-3096 #cwe-20 Join the discussion	CVE Database V5	05/14/2024, 07:29:06 UTC Added: 11/04/2025, 17:43:46 UTC

Threats Tagged 'cve-2024-3096'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2024-3096'

Lead Pen Test Professional