Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

An issue was discovered in Veritas Backup Exec before 22.2 HotFix 917391. Improper access controls allow for DLL Hijacking in the Windows DLL Search path.

CVE-2024-33673 is a vulnerability identified in Veritas Backup Exec versions prior to 22.2 HotFix 917391, involving improper access controls that facilitate DLL hijacking via the Windows DLL search path. DLL hijacking occurs when an attacker places a malicious DLL in a location that the application searches before the legitimate DLL, causing the application to load and execute the malicious code. In this case, the vulnerability stems from insufficient validation or restrictions on DLL loading paths, allowing an attacker with low privileges to inject malicious DLLs. The vulnerability does not require user interaction but does require local access with low privileges, making it a local privilege escalation vector. The impact is severe, as successful exploitation can compromise confidentiality, integrity, and availability of the system running Backup Exec, potentially allowing attackers to execute arbitrary code with elevated privileges. The CVSS 3.1 score of 7.8 reflects a high severity with low attack complexity and no user interaction needed. Although no exploits are currently known in the wild, the vulnerability represents a significant risk to organizations relying on Backup Exec for critical backup and recovery operations. The underlying weakness is categorized under CWE-284, indicating improper access control mechanisms. The lack of a patch link suggests that organizations should monitor Veritas advisories closely for the release of HotFix 917391 or later updates addressing this issue.

Detailed information about CVE-2024-33673: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-33673: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-33673: n/a

Threats Tagged 'cve-2024-33673'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2024-33673'

Lead Pen Test Professional