Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

ScienceLogic SL1 (formerly EM7) is affected by an unspecified vulnerability involving an unspecified third-party component packaged with SL1. The vulnerability is addressed in SL1 versions 12.1.3+, 12.2.3+, and 12.3+.  Remediations have been made available for all SL1 versions back to version lines 10.1.x, 10.2.x, 11.1.x, 11.2.x, and 11.3.x.

CVE-2024-9537 is a critical security vulnerability identified in ScienceLogic SL1, an enterprise-grade IT infrastructure monitoring and AIOps platform. The vulnerability stems from an unspecified third-party component included within the SL1 software package, though the exact nature of the flaw and the component involved have not been publicly disclosed. The vulnerability allows remote attackers to exploit the system without requiring any privileges or user interaction, as indicated by the CVSS vector (AV:N/AC:L/PR:N/UI:N). This means an attacker can potentially execute arbitrary code, disrupt services, or exfiltrate sensitive data remotely over the network. The CVSS score of 9.8 reflects a critical risk with high impact on confidentiality, integrity, and availability. The affected versions span multiple SL1 release lines prior to 12.1.3, 12.2.3, and 12.3, with remediation patches made available for all supported versions back to 10.1.x. Although no active exploits have been reported yet, the severity and ease of exploitation make this a high-priority vulnerability. ScienceLogic SL1 is commonly deployed in enterprise environments for monitoring complex IT infrastructure, making this vulnerability particularly concerning for organizations relying on it for operational continuity and security monitoring. The lack of detailed technical disclosure limits the ability to fully assess exploitation techniques but underscores the importance of immediate patching.

Detailed information about CVE-2024-9537: Vulnerability in ScienceLogic SL1 affecting ScienceLogic SL1. Get real-time updates, technical details, and mitigation

CVE-2024-9537: Vulnerability in ScienceLogic SL1 - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-9537: Vulnerability in ScienceLogic SL1

Threats Tagged 'cve-2024-9537'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2024-9537'

Lead Pen Test Professional