Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

AWS Security Bulletins

GCP Kubernetes Security

CERT/CC

Tenable Research

Microsoft Security Blog

Google Project Zero

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

A security update for PHP on Red Hat Enterprise Linux 9 addresses multiple vulnerabilities including cookie bypass, erroneous password verification, filter bypass, multipart form data parsing errors, configuration bypass, log manipulation, heap buffer over-read, single byte overread, and CRLF injection. These issues collectively pose moderate security risks such as account takeover and information leakage. The update fixes nine distinct CVEs and is rated with moderate severity by Red Hat Product Security.

This Red Hat security advisory covers a set of moderate-impact vulnerabilities in the PHP 8.2 module used in Red Hat Enterprise Linux 9. The fixed issues include CVE-2024-2756 (host/secure cookie bypass due to a partial fix of a previous vulnerability), CVE-2024-3096 (password_verify function erroneously returning true, risking account takeover), CVE-2024-5458 (filter bypass in filter_var with FILTER_VALIDATE_URL), CVE-2024-8925 (erroneous parsing of multipart form data), CVE-2024-8927 (bypass of cgi.force_redirect configuration via environment variable collision), and CVE-2024-9026 (PHP-FPM log manipulation vulnerability). Additional related vulnerabilities are also addressed in the update. Red Hat has provided patches for these issues in the PHP 8.2.25 update for RHEL 9, covering multiple architectures and extended update support versions.

Detailed information about Red Hat Security Advisory: php security update affecting Red Hat Product Security Red Hat. Get real-time updates, technical details, 

Red Hat Security Advisory: php security update - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2025:7315

https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/9.6_release_notes/index

https://access.redhat.com/security/updates/classification/#moderate

2275058

2275061

2291252

2317049

2317051

2317144

2327960

2328521

2328523

RHEL-71275

Canonical URL

https://access.redhat.com/errata/RHSA-2024:10949

RHEL-65837

https://access.redhat.com/errata/RHSA-2024:10950

Red Hat Security Advisory: php:8.1 security update

In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, due to a code logic error, filtering functions such as filter_var when validating URLs (FILTER_VALIDATE_URL) for certain types of URLs the function will result in invalid user information (username + password part of URLs) being treated as valid user information. This may lead to the downstream code accepting invalid URLs as valid and parsing them incorrectly.

CVE-2024-5458 is a vulnerability in the PHP language's filter_var function, specifically when used with the FILTER_VALIDATE_URL filter. The issue stems from a code logic error in PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, and 8.3.* before 8.3.8, where certain malformed URLs containing user information (username and password segments) are incorrectly validated as legitimate. This flaw means that URLs with invalid user info components bypass validation, leading downstream code to accept and parse these URLs incorrectly. The vulnerability is categorized under CWE-345 (Insufficient Verification of Data Authenticity), indicating that the validation mechanism fails to properly verify the authenticity of user info in URLs. While the vulnerability does not directly expose confidential data or cause denial of service, it undermines the integrity of URL validation, potentially allowing attackers to craft URLs that could manipulate application logic, bypass security checks, or cause unexpected behavior in URL-dependent processes. The CVSS v3.1 base score is 5.3 (medium), reflecting that the vulnerability is remotely exploitable without authentication or user interaction, with a limited impact on integrity and no impact on confidentiality or availability. No public exploits have been reported so far. The PHP Group has released patched versions to address this issue, but no direct patch links were provided in the source information. Organizations running affected PHP versions should apply updates promptly and audit their use of filter_var for URL validation to ensure additional checks are in place.

Detailed information about CVE-2024-5458: Vulnerability in PHP Group PHP affecting PHP Group PHP. Get real-time updates, technical details, and mitigation strat

CVE-2024-5458: Vulnerability in PHP Group PHP - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-5458: Vulnerability in PHP Group PHP


Red Hat Security Advisory: php:8.1 security updateCVE-2024-2756 0 A security update for PHP on Red Hat Enterprise Linux 9 addresses multiple vulnerabilities including cookie bypass, erroneous password verification, filter bypass, multipart form data parsing errors, configuration bypass, log manipulation, heap buffer over-read, single byte overread, and CRLF injection. These issues collectively pose moderate security risks such as account takeover and information leakage. The update fixes nine distinct CVEs and is rated with moderate severity by Red Hat Product Security. MediumVulnerability#gcve #csaf #cve-2024-2756 Join the discussion	GCVE Database	12/11/2024, 16:20:57 UTC Added: 06/27/2026, 22:08:41 UTC
CVE-2024-5458: Vulnerability in PHP Group PHPCVE-2024-5458 0 In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, due to a code logic error, filtering functions such as filter_var when validating URLs (FILTER_VALIDATE_URL) for certain types of URLs the function will result in invalid user information (username + password part of URLs) being treated as valid user information. This may lead to the downstream code accepting invalid URLs as valid and parsing them incorrectly. MediumVulnerabilityGermanyFranceUnited Kingdom+5#cve #cve-2024-5458 #gcve Join the discussion	CVE Database V5	06/12/2024, 07:30:42 UTC Added: 11/03/2025, 22:53:11 UTC

Threats Tagged 'cve-2024-5458'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2024-5458'

Lead Pen Test Professional