Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Krebs on Security

Palo Alto Unit 42

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Cross Application Scripting vulnerability in Vercom S.A. Redlink SDK in specific situations allows local code injection and to manipulate the view of a vulnerable application.This issue affects Redlink SDK versions through 1.13.

CVE-2024-6051 is a vulnerability classified under CWE-926 (Improper Export of Android Application Components) affecting the Vercom S.A. Redlink SDK up to version 1.13. This SDK is used by Android applications to integrate certain functionalities provided by Vercom S.A. The vulnerability manifests as a Cross Application Scripting (XAS) issue, which in this context allows local code injection and manipulation of the user interface of applications embedding the vulnerable SDK. Specifically, due to improper exportation of application components, malicious local applications or processes with sufficient privileges can inject code or alter the view of the host application, potentially misleading users or interfering with application logic. The CVSS 4.0 base score is 4.3, indicating a medium severity level. The attack vector is local (AV:L), requiring high attack complexity (AC:H), privileged access (PR:H), and user interaction (UI:A). The vulnerability does not affect confidentiality but impacts integrity and availability to a limited extent. No known exploits are currently reported in the wild, and no patches have been linked yet. The vulnerability is particularly relevant for applications using Redlink SDK on Android devices where multiple apps coexist, and privilege escalation or local code injection is feasible. This flaw could be exploited by malicious apps installed on the same device or by attackers with local access, potentially leading to UI manipulation or unauthorized actions within the vulnerable app.

Detailed information about CVE-2024-6051: CWE-926 Improper Export of Android Application Components in Vercom S.A. Redlink SDK affecting Vercom S.A. Redlink SDK

CVE-2024-6051: CWE-926 Improper Export of Android Application Components in Vercom S.A. Redlink SDK - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-6051: CWE-926 Improper Export of Android Application Components in Vercom S.A. Redlink SDK

Threats Tagged 'cve-2024-6051'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2024-6051'

Lead Pen Test Professional