Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

CVE Database V5

GCVE Database

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

A stack-based buffer overflow vulnerability in the P2P API service in BS Producten Petcam with firmware 33.1.0.0818 allows unauthenticated attackers within network range to overwrite the instruction pointer and achieve Remote Code Execution (RCE) by sending a specially crafted HTTP request.

CVE-2024-51348 is a stack-based buffer overflow vulnerability identified in the P2P API service of BS Producten Petcam devices running firmware version 33.1.0.0818. The vulnerability arises from improper bounds checking when processing HTTP requests, allowing an attacker to overwrite the instruction pointer on the stack. This memory corruption enables remote code execution (RCE) without requiring authentication or user interaction, provided the attacker is within network range of the device. The P2P API service is exposed on the device to facilitate peer-to-peer communication, commonly used for remote access and control of the camera. By sending a specially crafted HTTP request, an attacker can exploit this flaw to execute arbitrary code with the privileges of the service, potentially gaining full control over the device. The lack of a CVSS score indicates that the vulnerability is newly published and may not yet have an official severity rating, but the technical details suggest a critical impact. No patches or exploit code are currently publicly available, and no known active exploitation has been reported. However, the vulnerability's characteristics—unauthenticated remote code execution with no user interaction—make it a high-risk issue for affected devices. BS Producten Petcam devices are IoT cameras used in various environments, including residential, commercial, and industrial settings, making the vulnerability relevant to a broad user base. The attack vector requires network proximity, which may limit remote exploitation but still poses a significant threat in local networks or poorly segmented environments.

Detailed information about CVE-2024-51348: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-51348: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-51348: n/a

Threats Tagged 'cve-2024-51348'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2024-51348'

Lead Pen Test Professional