Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Zero Day Initiative

Cisco Talos

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

fig2dev

Floating point exception in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via get_slope function.

CVE-2025-31162 is a vulnerability identified in the fig2dev utility, part of the xfig suite, version 3.2.9a. The root cause is a floating point exception triggered within the get_slope function when processing certain local input data. This vulnerability falls under CWE-369 (Divide By Zero), indicating that improper handling of numerical input leads to an exception that can crash the application. Exploitation requires local access with low privileges and does not require user interaction, making it a local denial of service (DoS) vector. The vulnerability impacts availability by causing the fig2dev process to terminate unexpectedly, potentially disrupting workflows that depend on this tool for converting fig files to other graphical formats. The CVSS v3.1 score of 6.6 reflects a medium severity, with attack vector local (AV:L), attack complexity low (AC:L), privileges required low (PR:L), no user interaction (UI:N), unchanged scope (S:U), and impacts on confidentiality (C:L), integrity (I:L), and availability (A:H). No public exploits or patches are currently available, but the vulnerability is published and recognized by the CVE database. Given fig2dev's niche usage primarily in Unix-like environments for graphical file conversion, the attack surface is limited to local users with access to the system running the vulnerable version.

Detailed information about CVE-2025-31162: CWE-369 in xfig fig2dev affecting xfig fig2dev. Get real-time updates, technical details, and mitigation strategies.

CVE-2025-31162: CWE-369 in xfig fig2dev - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-31162: CWE-369 in xfig fig2dev

Segmentation fault in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via put_patternarc function.

CVE-2025-31163 is a vulnerability identified in the fig2dev utility, part of the xfig suite used for converting fig files into various graphical formats. The flaw is a null pointer dereference (CWE-476) occurring in the put_patternarc function, which handles pattern arcs in graphical rendering. When fig2dev processes crafted input locally, the function may attempt to dereference a null pointer, causing a segmentation fault and crashing the application. This results in a denial of service (DoS) condition affecting availability. The vulnerability affects version 3.2.9a of fig2dev and requires local access with low privileges (AV:L, PR:L) and no user interaction (UI:N). The CVSS v3.1 base score is 6.6, reflecting medium severity due to the high impact on availability but limited impact on confidentiality and integrity. The scope is unchanged (S:U), meaning the vulnerability affects only the local application instance. No patches or exploits are currently known, but the vulnerability has been publicly disclosed. The issue arises from improper handling of input data leading to dereferencing a null pointer, a common programming error that can be exploited to crash software. Given fig2dev’s role in graphical file conversions, the disruption could impact workflows relying on automated or manual use of this tool.

Detailed information about CVE-2025-31163: CWE-476 in xfig fig2dev affecting xfig fig2dev. Get real-time updates, technical details, and mitigation strategies.

CVE-2025-31163: CWE-476 in xfig fig2dev - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-31163: CWE-476 in xfig fig2dev

heap-buffer overflow in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via  create_line_with_spline.

CVE-2025-31164 is a heap-based buffer overflow vulnerability identified in the fig2dev component of the xfig project, specifically in version 3.2.9a. The vulnerability arises from improper handling of input data in the create_line_with_spline function, which processes spline line creation commands. When an attacker with local access crafts malicious input, it can overflow a heap buffer, leading to memory corruption. This corruption primarily impacts the availability of the application, potentially causing crashes or denial of service. The vulnerability requires low attack complexity and only limited privileges (local user), with no user interaction needed, making it a local privilege escalation vector for denial of service rather than remote code execution. The CVSS v3.1 base score is 6.6, reflecting medium severity with partial impacts on confidentiality and integrity, but high impact on availability. No patches are currently linked, and no known exploits have been observed in the wild, indicating the vulnerability is newly disclosed. The flaw is classified under CWE-122, which covers heap-based buffer overflows, a common and dangerous class of memory corruption bugs. Given the nature of fig2dev as a tool used for converting fig files to various graphical formats, this vulnerability could disrupt workflows in environments relying on automated or manual graphical processing.

Detailed information about CVE-2025-31164: CWE-122 Heap-based Buffer Overflow in xfig fig2dev affecting xfig fig2dev. Get real-time updates, technical details, 


CVE-2025-31162: CWE-369 in xfig fig2devCVE-2025-31162 0 Floating point exception in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via get_slope function. MediumVulnerabilityGermanyFranceUnited Kingdom+3#cve #cve-2025-31162 #cwe-369 Join the discussion	CVE Database V5	03/28/2025, 18:01:31 UTC Added: 11/03/2025, 20:49:13 UTC
CVE-2025-31163: CWE-476 in xfig fig2devCVE-2025-31163 0 Segmentation fault in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via put_patternarc function. MediumVulnerabilityGermanyFranceUnited Kingdom+5#cve #cve-2025-31163 #cwe-476 Join the discussion	CVE Database V5	03/28/2025, 18:01:24 UTC Added: 11/03/2025, 20:49:13 UTC
CVE-2025-31164: CWE-122 Heap-based Buffer Overflow in xfig fig2devCVE-2025-31164 0 heap-buffer overflow in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via create_line_with_spline. MediumVulnerabilityGermanyFranceUnited Kingdom+3#cve #cve-2025-31164 #cwe-122 Join the discussion	CVE Database V5	03/28/2025, 18:01:16 UTC Added: 11/03/2025, 20:49:13 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional