Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

AlienVault OTX General

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

GCP Compute Engine Security

JVN Japan

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

OpenXRechnungToolbox through 2024-10-05-3.0.0 before 6c50e89 allows XXE because the disallow-doctype-decl feature is not enabled in visualization/VisualizerImpl.java.

CVE-2024-58335 is an XML External Entity (XXE) vulnerability classified under CWE-611, affecting the OpenXRechnungToolbox software developed by jcthiele. The vulnerability exists because the XML parser used in the visualization component (specifically in visualization/VisualizerImpl.java) does not have the disallow-doctype-decl feature enabled. This omission allows attackers to craft malicious XML input containing external entity references, which the parser processes. When exploited, this can lead to disclosure of confidential information from the system processing the XML, as external entities can be used to read local files or interact with internal systems. The vulnerability requires network access and low privileges (PR:L) but does not require user interaction (UI:N). The CVSS 3.1 base score is 5.0 (medium severity), reflecting limited impact on confidentiality, no impact on integrity or availability, and relatively straightforward exploitation conditions. No public exploits or active exploitation in the wild have been reported to date. The affected versions include OpenXRechnungToolbox versions up to 2024-10-05-3.0.0 before commit 6c50e89. The vulnerability is particularly relevant for organizations using this toolbox for electronic invoicing processes, as it could expose sensitive invoice or business data. The lack of a patch link suggests that a fix may not yet be publicly available, emphasizing the need for interim mitigations such as disabling external entity processing or applying custom XML parser configurations.

Detailed information about CVE-2024-58335: CWE-611 Improper Restriction of XML External Entity Reference in jcthiele OpenXRechnungToolbox affecting jcthiele Ope

CVE-2024-58335: CWE-611 Improper Restriction of XML External Entity Reference in jcthiele OpenXRechnungToolbox - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-58335: CWE-611 Improper Restriction of XML External Entity Reference in jcthiele OpenXRechnungToolbox

Threats Tagged 'cve-2024-58335'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2024-58335'

Lead Pen Test Professional