Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

firefox

firefox-esr

Information disclosure in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.

This vulnerability involves information disclosure in the IndexedDB storage component of Firefox. IndexedDB is a browser feature used for client-side storage of significant amounts of structured data. The flaw could potentially expose stored data to unauthorized parties. Mozilla fixed this issue in Firefox 153 and Firefox ESR 140.13 as part of their July 21, 2026 security updates. The advisory categorizes the impact as moderate and does not report active exploitation. The fix is available and users are advised to update accordingly.

Detailed information about Information disclosure in the Storage: IndexedDB component. (CVE-2026-16391). Get real-time updates, technical details, and mitigatio

Information disclosure in the Storage: IndexedDB component. (CVE-2026-16391) - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-16391: Vulnerability in Mozilla Firefox

thunderbird

An attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under the `resource://pdf.js` origin.  This could allow them to access cross-origin PDF content. This access is limited to "same site" documents by the Site Isolation feature on desktop clients, but full cross-origin access is possible on Android versions. This vulnerability affects Firefox < 131, Firefox ESR < 128.3, Firefox ESR < 115.16, Thunderbird < 128.3, and Thunderbird < 131.

CVE-2024-9393 is a vulnerability in Mozilla Firefox and Thunderbird involving the PDF.js component, which is responsible for rendering PDF documents within the browser. The flaw arises from improper handling of multipart HTTP responses that can be crafted by an attacker to execute arbitrary JavaScript code under the resource://pdf.js origin. This origin is normally trusted to render PDF content securely. By exploiting this, an attacker can bypass same-origin policy restrictions and gain unauthorized access to PDF contents from different origins. On desktop platforms, Firefox's Site Isolation feature limits this cross-origin access to documents within the same site, reducing the scope of the attack. However, on Android versions of Firefox, this isolation is not enforced, allowing full cross-origin access to PDF content. The vulnerability affects Firefox versions below 131, ESR versions below 128.3 and 115.16, and Thunderbird versions below 128.3 and 131. The CVSS v3.1 base score is 7.5 (high), reflecting network attack vector, no required privileges or user interaction, and high confidentiality impact. The vulnerability is classified under CWE-346 (Origin Validation Error), indicating a failure to properly validate the origin of content. No patches or exploits are currently publicly available, but the risk is significant due to the ability to access sensitive PDF data across origins, potentially exposing confidential information.

Detailed information about CVE-2024-9393: Cross-origin access to PDF contents through multipart responses in Mozilla Firefox affecting Mozilla Firefox. Get real

CVE-2024-9393: Cross-origin access to PDF contents through multipart responses in Mozilla Firefox - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-9393: Cross-origin access to PDF contents through multipart responses in Mozilla Firefox


CVE-2026-16391: Vulnerability in Mozilla FirefoxCVE-2026-16391 0 Information disclosure in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13. HighVulnerability#gcve #osv #ghsa-jvcf-79h8-93pm Join the discussion	GCVE Database	07/21/2026, 12:38:04 UTC Added: 07/21/2026, 20:06:46 UTC
CVE-2024-9393: Cross-origin access to PDF contents through multipart responses in Mozilla FirefoxCVE-2024-9393 0 An attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under the `resource://pdf.js` origin. This could allow them to access cross-origin PDF content. This access is limited to "same site" documents by the Site Isolation feature on desktop clients, but full cross-origin access is possible on Android versions. This vulnerability affects Firefox < 131, Firefox ESR < 128.3, Firefox ESR < 115.16, Thunderbird < 128.3, and Thunderbird < 131. HighVulnerabilityGermanyFranceUnited Kingdom+7#cve #cve-2024-9393 Join the discussion	CVE Database V5	10/01/2024, 15:13:19 UTC Added: 11/03/2025, 22:53:13 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional