Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Zero Day Initiative

Cisco Talos

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Red Hat build of Apache Camel 4.8 for Spring Boot release and security update is now available.

The purpose of this text-only errata is to inform you about the security issues fixed.

Security Fix(es):

* org.apache.kafka/kafka-clients: privilege escalation to filesystem read-access via automatic ConfigProvider (CVE-2024-31141)

* org.springframework/spring-webmvc: Path traversal vulnerability in functional web frameworks (CVE-2024-38819)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2024-7254 is a stack overflow vulnerability in the Protocol Buffers component used by Red Hat Trusted Profile Analyzer 1.2.0 and Red Hat JBoss Enterprise Application Platform. This vulnerability could potentially lead to denial of service or other impacts related to stack overflow conditions. Red Hat has released Trusted Profile Analyzer version 1.2.1 as an update to address this issue. The vulnerability is also fixed in JBoss EAP XP 5.0 Update 2.0. The Red Hat advisories recommend upgrading to these fixed versions to mitigate the vulnerability.

Detailed information about Red Hat Security Advisory: Red Hat Build of Apache Camel 4.4 for Quarkus 3.8 update is now available (RHBQ 3.8.6.SP1) affecting Red H

Red Hat Security Advisory: Red Hat Build of Apache Camel 4.4 for Quarkus 3.8 update is now available (RHBQ 3.8.6.SP1) - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2025:7620

https://access.redhat.com/security/updates/classification/#important

2313454

2335206

JBEAP-26539

JBEAP-27340

JBEAP-27477

JBEAP-28933

JBEAP-29471

JBEAP-29737

JBEAP-30007

JBEAP-29738

Canonical URL

https://access.redhat.com/errata/RHSA-2024:11255

https://issues.redhat.com/browse/TC-1865

https://issues.redhat.com/browse/TC-1873

https://issues.redhat.com/browse/TC-1880

https://issues.redhat.com/browse/TC-1892

https://issues.redhat.com/browse/TC-1928

https://issues.redhat.com/browse/TC-1947

https://issues.redhat.com/browse/TC-1970

https://issues.redhat.com/browse/TC-1868

https://issues.redhat.com/browse/TC-1937

https://issues.redhat.com/browse/TC-1795

https://issues.redhat.com/browse/TC-1824

https://issues.redhat.com/browse/TC-1870

https://docs.redhat.com/en/documentation/red_hat_trusted_profile_analyzer/1.2.1/html/release_notes/index

https://access.redhat.com/security/cve/CVE-2024-21536

https://access.redhat.com/security/cve/CVE-2024-21538

https://access.redhat.com/security/cve/CVE-2024-7254

https://access.redhat.com/security/updates/classification/

https://access.redhat.com/errata/RHSA-2024:11256

https://access.redhat.com/errata/RHSA-2025:20057

https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.4

https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.4/html-single/installation_guide/index

https://access.redhat.com/errata/RHSA-2025:20052

https://access.redhat.com/errata/RHSA-2024:10700

2327264

2327614

Red Hat Security Advisory: Red Hat Build of Apache Camel 4.8 for Spring Boot security update.

jetty

There exists a security vulnerability in Jetty's DosFilter which can be exploited by unauthorized users to cause remote denial-of-service (DoS) attack on the server using DosFilter. By repeatedly sending crafted requests, attackers can trigger OutofMemory errors and exhaust the server's memory finally.

CVE-2024-9823 identifies a resource exhaustion vulnerability (CWE-400) in the DosFilter component of the Eclipse Foundation's Jetty server, versions 9.0.0, 10.0.0, and 11.0.0. Jetty is a widely used Java-based HTTP server and servlet container often embedded in enterprise applications and middleware. DosFilter is intended to protect servers from denial-of-service attacks by limiting request rates. However, this vulnerability allows an unauthenticated remote attacker to bypass these protections by sending specially crafted HTTP requests in rapid succession. These requests cause the server to consume excessive memory resources, eventually triggering OutOfMemory errors that crash or severely degrade the server's availability. The vulnerability does not impact confidentiality or integrity, as it does not allow data leakage or modification. The attack vector is network-based with low attack complexity and no privileges or user interaction required, making exploitation feasible in exposed environments. Although no public exploits have been reported yet, the potential for service disruption is significant, especially for high-availability systems. The absence of patches at the time of disclosure necessitates interim mitigations such as rate limiting at upstream proxies or disabling DosFilter if feasible. Monitoring for anomalous request patterns and resource usage is also advised. This vulnerability underscores the importance of robust DoS mitigation mechanisms and timely updates in critical middleware components.

Detailed information about CVE-2024-9823: CWE-400 Uncontrolled Resource Consumption in Eclipse Foundation Jetty affecting Eclipse Foundation Jetty. Get real-tim

CVE-2024-9823: CWE-400 Uncontrolled Resource Consumption in Eclipse Foundation Jetty - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-9823: CWE-400 Uncontrolled Resource Consumption in Eclipse Foundation Jetty


Red Hat Security Advisory: Red Hat Build of Apache Camel 4.8 for Spring Boot security update.CVE-2024-7254 0 Red Hat build of Apache Camel 4.8 for Spring Boot release and security update is now available. The purpose of this text-only errata is to inform you about the security issues fixed. Security Fix(es): * org.apache.kafka/kafka-clients: privilege escalation to filesystem read-access via automatic ConfigProvider (CVE-2024-31141) * org.springframework/spring-webmvc: Path traversal vulnerability in functional web frameworks (CVE-2024-38819) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. CriticalVulnerability#gcve #csaf #cve-2024-7254 Join the discussion	GCVE Database	12/02/2024, 16:06:11 UTC Added: 06/01/2026, 21:15:21 UTC
CVE-2024-9823: CWE-400 Uncontrolled Resource Consumption in Eclipse Foundation JettyCVE-2024-9823 0 There exists a security vulnerability in Jetty's DosFilter which can be exploited by unauthorized users to cause remote denial-of-service (DoS) attack on the server using DosFilter. By repeatedly sending crafted requests, attackers can trigger OutofMemory errors and exhaust the server's memory finally. MediumVulnerabilityGermanyFranceUnited Kingdom+5#cve #cve-2024-9823 #cwe-400 Join the discussion	CVE Database V5	10/14/2024, 15:03:02 UTC Added: 11/03/2025, 19:53:59 UTC

Threats Tagged 'cve-2024-9823'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2024-9823'

Lead Pen Test Professional