Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

Reddit NetSec

Reddit Cybersecurity

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit BlueTeam

Reddit ThreatIntel

Reddit Malware

Reddit Reverse Engineering

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

libsoup

GNOME libsoup before 3.6.1 has an infinite loop, and memory consumption.during the reading of certain patterns of WebSocket data from clients.

CVE-2024-52532 is a vulnerability identified in GNOME libsoup, a widely used HTTP client/server library for GNOME applications, specifically affecting versions prior to 3.6.1. The flaw arises during the processing of certain WebSocket data patterns sent by clients, which triggers an infinite loop within the library's code. This infinite loop leads to uncontrolled memory consumption, potentially exhausting system resources and causing denial of service (DoS). The vulnerability is exploitable remotely over the network without requiring any privileges or user interaction, making it particularly dangerous in exposed environments. The CVSS v3.1 score of 7.5 reflects a high severity level, emphasizing the impact on availability (A:H) while confidentiality and integrity remain unaffected. The underlying weakness corresponds to CWE-835 (Loop with Unreachable Exit Condition), indicating a logic flaw in loop termination conditions. Although no public exploits have been reported yet, the vulnerability's characteristics suggest it could be leveraged by attackers to disrupt services relying on libsoup, including GNOME desktop applications and backend services that utilize this library for WebSocket communication. The absence of a patch link indicates that a fix may be pending or newly released, so organizations should monitor vendor advisories closely.

Detailed information about CVE-2024-52532: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-52532: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-52532: n/a

GNOME libsoup before 3.6.1 allows a buffer overflow in applications that perform conversion to UTF-8 in soup_header_parse_param_list_strict. There is a plausible way to reach this remotely via soup_message_headers_get_content_type (e.g., an application may want to retrieve the content type of a request or response).

CVE-2024-52531 is a buffer overflow vulnerability classified under CWE-787, affecting GNOME libsoup versions prior to 3.6.1. The vulnerability occurs in the function soup_header_parse_param_list_strict, which is responsible for converting HTTP header parameters to UTF-8. Due to improper bounds checking, an out-of-bounds write can occur during this conversion process. This flaw can be remotely triggered through the soup_message_headers_get_content_type function, which applications use to retrieve the content type from HTTP request or response headers. Because libsoup is widely used in GNOME-based applications and other software relying on HTTP communication, this vulnerability presents a remote attack vector without requiring authentication or user interaction. The CVSS 3.1 base score is 6.5, reflecting medium severity with network attack vector (AV:N), high attack complexity (AC:H), no privileges required (PR:N), no user interaction (UI:N), and impacts on confidentiality, integrity, and availability (C:L/I:L/A:L). Exploitation could lead to application crashes, data corruption, or potentially arbitrary code execution depending on the context and memory layout. While no public exploits are known at this time, the vulnerability's presence in a core networking library warrants proactive mitigation. The lack of a patch link suggests that remediation may require upgrading to libsoup 3.6.1 or later once available or applying vendor advisories. Organizations using GNOME or libsoup in network-facing applications should audit their deployments and monitor for updates.

Detailed information about CVE-2024-52531: CWE-787 Out-of-bounds Write in GNOME libsoup affecting GNOME libsoup. Get real-time updates, technical details, and m

CVE-2024-52531: CWE-787 Out-of-bounds Write in GNOME libsoup - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-52531: CWE-787 Out-of-bounds Write in GNOME libsoup

GNOME libsoup before 3.6.0 allows HTTP request smuggling in some configurations because '\0' characters at the end of header names are ignored, i.e., a "Transfer-Encoding\0: chunked" header is treated the same as a "Transfer-Encoding: chunked" header.

CVE-2024-52530 is a vulnerability affecting GNOME libsoup, a HTTP client/server library widely used in GNOME-based applications and other Linux environments. The flaw exists in versions prior to 3.6.0 and arises because libsoup improperly handles null ('\0') characters appended to HTTP header names. Specifically, a header such as "Transfer-Encoding\0: chunked" is incorrectly parsed as a legitimate "Transfer-Encoding: chunked" header. This parsing flaw enables HTTP request smuggling attacks, where an attacker crafts malicious HTTP requests that are interpreted differently by front-end and back-end servers or proxies. Such attacks can bypass security controls, poison web caches, hijack user sessions, or facilitate other injection attacks. The vulnerability does not require authentication or user interaction and can be exploited remotely over the network. The CVSS v3.1 score of 7.5 reflects the high impact on integrity, with no impact on confidentiality or availability. While no public exploits are currently known, the vulnerability is classified under CWE-444 (Improper HTTP Request Smuggling), a well-understood attack vector. The lack of patch links suggests that remediation involves upgrading to libsoup 3.6.0 or later, where this parsing issue has been fixed. Organizations using GNOME libsoup in web-facing applications or middleware should consider this vulnerability critical to address to prevent potential exploitation.

Detailed information about CVE-2024-52530: n/a. Get real-time updates, technical details, and mitigation strategies.


CVE-2024-52532: n/aCVE-2024-52532 0 GNOME libsoup before 3.6.1 has an infinite loop, and memory consumption.during the reading of certain patterns of WebSocket data from clients. HighVulnerabilityGermanyFranceUnited Kingdom+3#cve #cve-2024-52532 Join the discussion	CVE Database V5	11/11/2024, 00:00:00 UTC Added: 11/03/2025, 22:38:37 UTC
CVE-2024-52531: CWE-787 Out-of-bounds Write in GNOME libsoupCVE-2024-52531 0 GNOME libsoup before 3.6.1 allows a buffer overflow in applications that perform conversion to UTF-8 in soup_header_parse_param_list_strict. There is a plausible way to reach this remotely via soup_message_headers_get_content_type (e.g., an application may want to retrieve the content type of a request or response). MediumVulnerabilityGermanyFranceUnited Kingdom+6#cve #cve-2024-52531 #cwe-787 Join the discussion	CVE Database V5	11/11/2024, 00:00:00 UTC Added: 11/03/2025, 22:38:37 UTC
CVE-2024-52530: n/aCVE-2024-52530 0 GNOME libsoup before 3.6.0 allows HTTP request smuggling in some configurations because '\0' characters at the end of header names are ignored, i.e., a "Transfer-Encoding\0: chunked" header is treated the same as a "Transfer-Encoding: chunked" header. HighVulnerabilityGermanyFranceUnited Kingdom+7#cve #cve-2024-52530 Join the discussion	CVE Database V5	11/11/2024, 00:00:00 UTC Added: 11/03/2025, 22:38:37 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional