Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Red Hat Quay, an enterprise container registry, has multiple security vulnerabilities affecting versions before 3.13.5. Among these is CVE-2024-6827, a potential denial-of-service vulnerability in the Django utility function django.utils.text.wrap(). The Red Hat advisory RHBA-2025:3651 confirms that Quay 3.13.5 includes fixes for these issues. The advisory also references other CVEs addressed in this release. The vulnerabilities are rated as important by Red Hat Product Security. No CVSS scores are provided in the advisory. The affected versions include Red Hat Quay Enterprise 3 on x86_64 and other architectures as indicated by container image references. The vendor advisory instructs users to update to the fixed version and ensure prior errata are applied.

Detailed information about Red Hat Security Advisory: updated discovery container images affecting Red Hat Product Security Red Hat. Get real-time updates, tech

Red Hat Security Advisory: updated discovery container images - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2025:3709

https://access.redhat.com/security/updates/classification/#important

DISCOVERY-924

Canonical URL

https://access.redhat.com/errata/RHBA-2025:3651

PROJQUAY-7579

PROJQUAY-8692

https://access.redhat.com/errata/RHBA-2025:3652

https://access.redhat.com/errata/RHBA-2025:3653

Red Hat Bug Fix Advisory: Red Hat Quay v3.11.10 bug fix release

gunicorn

Gunicorn version 21.2.0 does not properly validate the value of the 'Transfer-Encoding' header as specified in the RFC standards, which leads to the default fallback method of 'Content-Length,' making it vulnerable to TE.CL request smuggling. This vulnerability can lead to cache poisoning, data exposure, session manipulation, SSRF, XSS, DoS, data integrity compromise, security bypass, information leakage, and business logic abuse.

CVE-2024-6827 is a vulnerability classified under CWE-444 (Inconsistent Interpretation of HTTP Requests) affecting Gunicorn version 21.2.0, a widely used Python WSGI HTTP server. The issue arises from Gunicorn's improper validation of the 'Transfer-Encoding' HTTP header, which is critical for correctly parsing chunked HTTP requests as per RFC 7230. Instead of strictly enforcing the presence and correctness of 'Transfer-Encoding', Gunicorn defaults to using the 'Content-Length' header when it encounters unexpected or malformed values. This fallback behavior enables a TE.CL (Transfer-Encoding to Content-Length) HTTP request smuggling attack, where an attacker crafts a request that is interpreted differently by Gunicorn and downstream servers or proxies. Such desynchronization can lead to severe security consequences including cache poisoning, where malicious content is cached and served to other users; data exposure through unauthorized access; session manipulation allowing hijacking or fixation; server-side request forgery (SSRF) enabling internal network scanning or attacks; cross-site scripting (XSS); denial of service (DoS) by exhausting resources; data integrity compromise; security bypasses; information leakage; and abuse of business logic. The vulnerability is remotely exploitable without authentication or user interaction, increasing its risk profile. Although no public exploits are currently known, the CVSS v3.0 score of 7.5 reflects a high severity due to the potential confidentiality impact and ease of exploitation. Gunicorn is commonly deployed in web applications across various industries, making this vulnerability significant for organizations relying on it for Python web service hosting.

Detailed information about CVE-2024-6827: CWE-444 Inconsistent Interpretation of HTTP Requests in benoitc benoitc/gunicorn affecting benoitc benoitc/gunicorn. G

CVE-2024-6827: CWE-444 Inconsistent Interpretation of HTTP Requests in benoitc benoitc/gunicorn - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-6827: CWE-444 Inconsistent Interpretation of HTTP Requests in benoitc benoitc/gunicorn


Red Hat Bug Fix Advisory: Red Hat Quay v3.11.10 bug fix releaseCVE-2024-6827 0 Quay 3.11.10 HighVulnerability#gcve #csaf #cve-2024-6827 Join the discussion	GCVE Database	04/14/2025, 17:21:26 UTC Added: 07/03/2026, 22:50:34 UTC
CVE-2024-6827: CWE-444 Inconsistent Interpretation of HTTP Requests in benoitc benoitc/gunicornCVE-2024-6827 0 Gunicorn version 21.2.0 does not properly validate the value of the 'Transfer-Encoding' header as specified in the RFC standards, which leads to the default fallback method of 'Content-Length,' making it vulnerable to TE.CL request smuggling. This vulnerability can lead to cache poisoning, data exposure, session manipulation, SSRF, XSS, DoS, data integrity compromise, security bypass, information leakage, and business logic abuse. HighVulnerabilityGermanyFranceUnited Kingdom+3#cve #cve-2024-6827 #cwe-444 Join the discussion	CVE Database V5	03/20/2025, 10:09:55 UTC Added: 10/15/2025, 13:01:30 UTC

Threats Tagged 'cve-2024-6827'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2024-6827'

Lead Pen Test Professional