Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

SpagoBI

A Cross-Site Request Forgery (CSRF) vulnerability has been found in SpagoBI v3.5.1 in the user administration panel. An authenticated user can lead another user into executing unwanted actions inside the application they are logged in, like adding, editing or deleting users.

CVE-2024-54792 is a Cross-Site Request Forgery (CSRF) vulnerability identified in SpagoBI version 3.5.1, an open-source business intelligence suite widely used for data analytics and reporting. The vulnerability resides in the user administration panel, allowing an authenticated attacker to coerce another authenticated user into executing unwanted administrative actions such as adding, editing, or deleting user accounts. This attack exploits the lack of proper CSRF tokens or validation mechanisms in the user management interface. The attacker must first authenticate to the application and then trick the victim into visiting a crafted malicious webpage or link that issues unauthorized requests on their behalf. The CVSS 3.1 score of 6.1 reflects that the attack vector is network-based with low attack complexity, no privileges required, but requires user interaction. The scope is changed because the attack affects other users' accounts, impacting confidentiality and integrity by potentially altering user roles or access rights. There is no impact on availability. No patches or official fixes have been released at the time of publication, and no known exploits are reported in the wild. The vulnerability is classified under CWE-352, which covers CSRF weaknesses. Organizations using SpagoBI 3.5.1 should prioritize mitigating this vulnerability to prevent unauthorized privilege escalation or user management manipulation.

Detailed information about CVE-2024-54792: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-54792: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-54792: n/a

Threats Tagged 'cve-2024-54792'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2024-54792'

Lead Pen Test Professional