Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit NetSec

Reddit Cybersecurity

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

AWS Security Bulletins

GCP Kubernetes Security

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

ecma262

An error in the ECMA-262 specification relating to Async Generators could have resulted in a type confusion, potentially leading to memory corruption and an exploitable crash. This vulnerability affects Firefox < 128, Firefox ESR < 115.13, Thunderbird < 115.13, and Thunderbird < 128.

CVE-2024-7652 is a vulnerability discovered in Mozilla Firefox and Thunderbird related to the handling of Async Generators as defined by the ECMA-262 JavaScript specification. The flaw arises from a type confusion error, where the program mistakenly treats a data type as another incompatible type, leading to memory corruption. Specifically, this vulnerability is linked to improper internal handling of asynchronous generator objects, which can cause the application to crash or behave unpredictably. The affected versions include Firefox prior to 128, Firefox ESR prior to 115.13, Thunderbird prior to 115.13, and Thunderbird prior to 128. The vulnerability has a CVSS v3.1 base score of 7.5, indicating high severity, with an attack vector classified as network (AV:N), low attack complexity (AC:L), no privileges required (PR:N), no user interaction (UI:N), and unchanged scope (S:U). The impact is primarily on availability (A:H), with no direct confidentiality or integrity impact reported. While no public exploits have been observed, the potential for memory corruption could allow attackers to cause denial of service or, in some cases, execute arbitrary code if combined with other vulnerabilities. The vulnerability is categorized under CWE-843 (Access of Resource Using Incompatible Type) and CWE-476 (NULL Pointer Dereference), both of which are common causes of memory safety issues. Mozilla has reserved the CVE and published the advisory but has not yet released patch links, indicating that fixes may be forthcoming. Organizations using affected versions should monitor Mozilla’s updates closely and prepare for immediate patch deployment.

Detailed information about CVE-2024-7652: Vulnerability in Mozilla Firefox affecting Mozilla Firefox. Get real-time updates, technical details, and mitigation s

CVE-2024-7652: Vulnerability in Mozilla Firefox - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-7652: Vulnerability in Mozilla Firefox

Threats Tagged 'cve-2024-7652'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2024-7652'

Lead Pen Test Professional