Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

lemonldap-ng

A cross-site scripting (XSS) vulnerability in LemonLDAP::NG before 2.19.3 allows remote attackers to inject arbitrary web script or HTML into the login page via a username if userControl has been set to a non-default value that allows special HTML characters.

CVE-2024-48933 is a cross-site scripting (XSS) vulnerability identified in LemonLDAP::NG, an open-source Web Single Sign-On (SSO) and access management system widely used in enterprise and governmental environments. The vulnerability exists in versions prior to 2.19.3 and arises when the userControl parameter is configured to allow special HTML characters in the username input field. This misconfiguration enables remote attackers to inject arbitrary JavaScript or HTML code into the login page. When a victim accesses a maliciously crafted login URL or submits a specially crafted username, the injected script executes in the victim’s browser context. This can lead to session hijacking, credential theft, or redirection to malicious sites, compromising user confidentiality and integrity. The vulnerability does not affect system availability and requires user interaction, such as clicking a link or submitting a form. The CVSS 3.1 score of 6.1 reflects a medium severity, with an attack vector over the network, no privileges required, low attack complexity, but requiring user interaction. No public exploits have been reported yet, but the vulnerability’s presence in authentication infrastructure makes it a notable risk. LemonLDAP::NG is commonly deployed in European public sector and enterprise environments, increasing the relevance of this vulnerability in those contexts. The vulnerability can be mitigated by upgrading LemonLDAP::NG to version 2.19.3 or later, which addresses the input sanitization issue, and by configuring userControl to disallow special HTML characters in usernames, reducing the attack surface.

Detailed information about CVE-2024-48933: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-48933: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-48933: n/a

Threats Tagged 'cve-2024-48933'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2024-48933'

Lead Pen Test Professional