Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

* requests: Requests vulnerable to .netrc credentials leak via malicious URLs (CVE-2024-47081)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

The fence-agents packages in Red Hat Enterprise Linux 9 rely on the python-requests library, which is vulnerable to leaking .netrc credentials when processing malicious URLs (CVE-2024-47081). This vulnerability could expose sensitive authentication credentials used for remote power management in cluster environments. Red Hat has released an updated python-requests package version 2.25.1-10.el9_6 that fixes this issue. The advisory covers multiple architectures and variants of Red Hat Enterprise Linux 9, including Extended Update Support and Update Services for SAP Solutions.

Detailed information about Red Hat Security Advisory: python-requests security update affecting Red Hat Product Security Red Hat. Get real-time updates, technic

Red Hat Security Advisory: python-requests security update - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2025:12519

https://access.redhat.com/security/updates/classification/#moderate

2371272

Canonical URL

https://access.redhat.com/errata/RHSA-2025:13234

https://access.redhat.com/errata/RHSA-2025:13604

https://access.redhat.com/errata/RHSA-2025:14750

https://access.redhat.com/errata/RHSA-2025:14999

https://access.redhat.com/errata/RHSA-2025:15121

https://access.redhat.com/errata/RHSA-2025:15122

Red Hat Security Advisory: fence-agents security update

Requests is a HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on one's Requests Session.

CVE-2024-47081 is a medium-severity vulnerability affecting the Python HTTP library Requests, versions prior to 2.32.4. The root cause is a URL parsing flaw that can lead to the leakage of credentials stored in the .netrc file. The .netrc file is commonly used to store login credentials for HTTP authentication, and Requests can automatically use these credentials when making HTTP requests. Due to improper handling of certain maliciously crafted URLs, Requests may inadvertently expose these credentials to third parties, potentially allowing attackers to intercept sensitive authentication information. This vulnerability is classified under CWE-522, which relates to insufficiently protected credentials. The CVSS 3.1 base score is 5.3, reflecting a medium severity level, with the vector indicating network attack vector (AV:N), high attack complexity (AC:H), no privileges required (PR:N), user interaction required (UI:R), unchanged scope (S:U), high confidentiality impact (C:H), no integrity impact (I:N), and no availability impact (A:N). Exploitation requires a user to interact with a malicious URL, and the attacker must craft URLs that trigger the credential leak. There are no known exploits in the wild at this time. The recommended fix is to upgrade Requests to version 2.32.4 or later, where the issue is resolved. For environments where upgrading is not immediately possible, disabling the use of the .netrc file by setting `trust_env=False` on the Requests Session object can mitigate the risk by preventing automatic credential usage. This vulnerability primarily affects applications and services that use the Requests library to make HTTP calls and rely on .netrc for credential management, which is common in automated scripts, CI/CD pipelines, and other programmatic HTTP interactions.

Detailed information about CVE-2024-47081: CWE-522: Insufficiently Protected Credentials in psf requests affecting psf requests. Get real-time updates, technica

CVE-2024-47081: CWE-522: Insufficiently Protected Credentials in psf requests - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-47081: CWE-522: Insufficiently Protected Credentials in psf requests


Red Hat Security Advisory: fence-agents security updateCVE-2024-47081 0 Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * requests: Requests vulnerable to .netrc credentials leak via malicious URLs (CVE-2024-47081) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. MediumVulnerability#gcve #csaf #cve-2024-47081 Join the discussion	GCVE Database	08/04/2025, 15:20:03 UTC Added: 06/02/2026, 21:43:35 UTC
CVE-2024-47081: CWE-522: Insufficiently Protected Credentials in psf requestsCVE-2024-47081 0 Requests is a HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on one's Requests Session. MediumVulnerabilityGermanyFranceUnited Kingdom+7#cve #cve-2024-47081 #cwe-522 Join the discussion	CVE Database V5	06/09/2025, 17:57:47 UTC Added: 06/10/2025, 18:54:19 UTC

Threats Tagged 'cve-2024-47081'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2024-47081'

Lead Pen Test Professional