Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

php-src

In PHP versions:8.1.* before 8.1.34, 8.2.* before 8.2.30, 8.3.* before 8.3.29, 8.4.* before 8.4.16, 8.5.* before 8.5.1, a heap buffer overflow occurs in array_merge() when the total element count of packed arrays exceeds 32-bit limits or HT_MAX_SIZE, due to an integer overflow in the precomputation of element counts using zend_hash_num_elements(). This may lead to memory corruption or crashes and affect the integrity and availability of the target server.

CVE-2025-14178 is a heap buffer overflow vulnerability identified in multiple PHP versions (8.1.* before 8.1.34, 8.2.* before 8.2.30, 8.3.* before 8.3.29, 8.4.* before 8.4.16, and 8.5.* before 8.5.1). The flaw arises in the array_merge() function when it processes packed arrays whose combined element count exceeds the 32-bit integer limit or the internal HT_MAX_SIZE threshold. This condition triggers an integer overflow during the precomputation of element counts via zend_hash_num_elements(), leading to an incorrect allocation size for the heap buffer. Consequently, this results in a heap buffer overflow, causing memory corruption. The corrupted memory state can lead to application crashes or potentially unpredictable behavior affecting the integrity and availability of PHP applications. The vulnerability does not require any privileges or user interaction but has a high attack complexity due to the need to craft arrays exceeding specific size limits. There are no known exploits in the wild at the time of publication. The CVSS v3.1 base score is 6.5, reflecting a medium severity with network attack vector, no privileges required, no user interaction, and impact primarily on availability and integrity. This vulnerability is relevant for any PHP-based web applications or services running affected versions, especially those exposed to untrusted input that could trigger large array merges.

Detailed information about CVE-2025-14178: CWE-787 Out-of-bounds Write in PHP Group PHP affecting PHP Group PHP. Get real-time updates, technical details, and m

CVE-2025-14178: CWE-787 Out-of-bounds Write in PHP Group PHP - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-14178: CWE-787 Out-of-bounds Write in PHP Group PHP

In PHP versions 8.3.* before 8.3.19 and 8.4.* before 8.4.5, a code sequence involving __set handler or ??=  operator and exceptions can lead to a use-after-free vulnerability. If the third party can control the memory layout leading to this, for example by supplying specially crafted inputs to the script, it could lead to remote code execution.

CVE-2024-11235 is a use-after-free vulnerability classified under CWE-416 found in PHP versions 8.3.* prior to 8.3.19 and 8.4.* prior to 8.4.5. The flaw occurs due to a problematic code sequence involving the __set magic method handler or the null coalescing assignment operator (??=) when combined with exception handling. This sequence can cause PHP to free memory prematurely while it is still in use, leading to memory corruption. If an attacker can manipulate the memory layout—typically by supplying specially crafted inputs to a PHP script that triggers this code path—they may exploit this to execute arbitrary code remotely. The vulnerability does not require authentication or user interaction, making it exploitable over the network. The CVSS 4.0 vector indicates network attack vector, high attack complexity, no privileges required, no user interaction, and high impact on confidentiality, integrity, and availability. Although no public exploits are currently known, the vulnerability's nature and severity suggest it is a high-risk threat. The PHP Group has released patches in versions 8.3.19 and 8.4.5 to address this issue, but many systems may remain vulnerable if not updated. This vulnerability is particularly relevant for web applications and hosting environments using affected PHP versions, as it could allow attackers to gain full control over affected servers.

Detailed information about CVE-2024-11235: CWE-416 Use After Free in PHP Group PHP affecting PHP Group PHP. Get real-time updates, technical details, and mitiga

CVE-2024-11235: CWE-416 Use After Free in PHP Group PHP - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-11235: CWE-416 Use After Free in PHP Group PHP


CVE-2025-14178: CWE-787 Out-of-bounds Write in PHP Group PHPCVE-2025-14178 0 In PHP versions:8.1.* before 8.1.34, 8.2.* before 8.2.30, 8.3.* before 8.3.29, 8.4.* before 8.4.16, 8.5.* before 8.5.1, a heap buffer overflow occurs in array_merge() when the total element count of packed arrays exceeds 32-bit limits or HT_MAX_SIZE, due to an integer overflow in the precomputation of element counts using zend_hash_num_elements(). This may lead to memory corruption or crashes and affect the integrity and availability of the target server. MediumVulnerabilityGermanyFranceUnited Kingdom+5#cve #cve-2025-14178 #cwe-787 Join the discussion	CVE Database V5	12/27/2025, 19:27:41 UTC Added: 12/30/2025, 22:22:50 UTC
CVE-2024-11235: CWE-416 Use After Free in PHP Group PHPCVE-2024-11235 0 In PHP versions 8.3.* before 8.3.19 and 8.4.* before 8.4.5, a code sequence involving __set handler or ??= operator and exceptions can lead to a use-after-free vulnerability. If the third party can control the memory layout leading to this, for example by supplying specially crafted inputs to the script, it could lead to remote code execution. CriticalVulnerabilityUnited StatesGermanyUnited Kingdom+11#cve #cve-2024-11235 #cwe-416 Join the discussion	CVE Database V5	04/04/2025, 17:51:07 UTC Added: 02/26/2026, 19:40:40 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional