Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

AlienVault OTX General

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit NetSec

Reddit Cybersecurity

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Ghostscript

An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs when converting glyphs to Unicode in psi/zbfont.c.

CVE-2025-27835 is a buffer overflow vulnerability identified in Artifex Ghostscript, a widely used interpreter for PostScript and PDF files, specifically in versions prior to 10.05.0. The vulnerability arises in the psi/zbfont.c source file during the conversion process of glyphs to Unicode characters. This buffer overflow is classified under CWE-120, indicating a classic memory corruption issue where data exceeding buffer boundaries can overwrite adjacent memory. The vulnerability can be exploited locally without requiring privileges (AV:L), with low attack complexity (AC:L), no privileges required (PR:N), but it does require user interaction (UI:R), such as opening or processing a crafted document. The impact is severe, affecting confidentiality, integrity, and availability (C:H/I:H/A:H), potentially allowing an attacker to execute arbitrary code, crash the application, or escalate privileges. Although no known exploits are currently reported in the wild, the high CVSS score of 7.8 reflects the significant risk posed by this vulnerability. Ghostscript is commonly integrated into document processing pipelines, printing services, and PDF rendering applications, making this vulnerability relevant to many environments that handle PostScript or PDF files. The absence of patch links suggests that remediation involves upgrading to version 10.05.0 or later, where the issue is fixed.

Detailed information about CVE-2025-27835: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2025-27835: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-27835: n/a

An issue was discovered in Artifex Ghostscript before 10.05.0. The NPDL device has a Compression buffer overflow for contrib/japanese/gdevnpdl.c.

CVE-2025-27832 is a critical security vulnerability identified in Artifex Ghostscript, a widely used interpreter for PostScript and PDF files. The vulnerability exists in the NPDL device implementation, specifically in the compression buffer handling code located in contrib/japanese/gdevnpdl.c. This is a classic buffer overflow (CWE-120) where the compression buffer can be overflowed due to improper bounds checking, allowing an attacker to overwrite memory. The flaw affects all versions of Ghostscript prior to 10.05.0. Exploitation requires no privileges (PR:N), no user interaction (UI:N), and can be triggered remotely over the network (AV:N), making it highly exploitable. Successful exploitation can lead to arbitrary code execution with the privileges of the Ghostscript process, compromising confidentiality, integrity, and availability of the affected system. The vulnerability has a CVSS v3.1 base score of 9.8, reflecting its critical severity. Despite no known exploits currently in the wild, the nature of the vulnerability and the widespread use of Ghostscript in document processing and printing workflows make it a significant threat. The vulnerability is particularly relevant for environments processing Japanese NPDL print data, as the flaw resides in the Japanese device driver code. No official patches were listed at the time of publication, so mitigation may require workarounds or updates once available.

Detailed information about CVE-2025-27832: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2025-27832: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-27832: n/a

ghostscript

An issue was discovered in Artifex Ghostscript before 10.05.0. The DOCXWRITE TXTWRITE device has a text buffer overflow via long characters to devices/vector/doc_common.c.

CVE-2025-27831 is a critical security vulnerability identified in Artifex Ghostscript, a widely used interpreter for PostScript and PDF files. The flaw exists in the DOCXWRITE TXTWRITE device implementation within the devices/vector/doc_common.c source file, where a text buffer overflow can be triggered by processing excessively long character sequences. This buffer overflow (classified under CWE-120) can lead to arbitrary code execution, allowing attackers to compromise the confidentiality, integrity, and availability of affected systems. The vulnerability requires no authentication or user interaction and can be exploited remotely, as indicated by the CVSS vector (AV:N/AC:L/PR:N/UI:N). The vulnerability affects all versions prior to 10.05.0, although specific affected versions are not enumerated. Despite no known exploits currently in the wild, the high CVSS score of 9.8 underscores the critical nature of this issue. Ghostscript is commonly integrated into document processing pipelines, print servers, and PDF rendering services, making this vulnerability particularly dangerous in environments that process untrusted documents. Exploitation could allow attackers to execute arbitrary code, potentially leading to full system compromise, data theft, or disruption of services. The root cause is improper handling of input length in the text buffer, which can be mitigated by bounds checking and secure coding practices. The vulnerability was reserved on March 7, 2025, and published on March 25, 2025, with no patches linked at the time of reporting, indicating the need for immediate attention from users and vendors.

Detailed information about CVE-2025-27831: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2025-27831: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-27831: n/a

Artifex Ghostscript before 10.03.1 allows memory corruption, and SAFER sandbox bypass, via format string injection with a uniprint device.

CVE-2024-29510 is a vulnerability identified in Artifex Ghostscript, a widely used interpreter for PostScript and PDF files, prior to version 10.03.1. The flaw arises from a format string injection vulnerability within the uniprint device component. Format string vulnerabilities occur when user-controllable input is unsafely used as a format string in functions like printf, leading to memory corruption. In this case, the vulnerability allows an attacker to corrupt memory and bypass the SAFER sandbox, a security mechanism designed to restrict Ghostscript's capabilities and limit potential damage from malicious files. The vulnerability requires local access and user interaction, as indicated by the CVSS vector (AV:L/PR:N/UI:R), meaning an attacker must convince a user to open a crafted file or otherwise interact with the vulnerable application. The scope is changed (S:C), indicating that exploitation can affect resources beyond the vulnerable component, specifically compromising confidentiality (C:H) without impacting integrity or availability. Although no known exploits are currently reported in the wild, the medium CVSS score of 6.3 reflects the moderate risk posed by this vulnerability. The CWE-693 classification corresponds to protection mechanism failure, highlighting the bypass of the SAFER sandbox. Since no patches are linked yet, users should monitor for updates from Artifex and apply them promptly once available.

Detailed information about CVE-2024-29510: n/a. Get real-time updates, technical details, and mitigation strategies.


CVE-2025-27835: n/aCVE-2025-27835 0 An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs when converting glyphs to Unicode in psi/zbfont.c. HighVulnerabilityGermanyFranceUnited Kingdom+3#cve #cve-2025-27835 Join the discussion	CVE Database V5	03/25/2025, 00:00:00 UTC Added: 11/03/2025, 20:49:06 UTC
CVE-2025-27832: n/aCVE-2025-27832 0 An issue was discovered in Artifex Ghostscript before 10.05.0. The NPDL device has a Compression buffer overflow for contrib/japanese/gdevnpdl.c. CriticalVulnerabilityGermanyFranceUnited Kingdom+7#cve #cve-2025-27832 Join the discussion	CVE Database V5	03/25/2025, 00:00:00 UTC Added: 11/03/2025, 20:49:06 UTC
CVE-2025-27831: n/aCVE-2025-27831 0 An issue was discovered in Artifex Ghostscript before 10.05.0. The DOCXWRITE TXTWRITE device has a text buffer overflow via long characters to devices/vector/doc_common.c. CriticalVulnerabilityGermanyFranceUnited Kingdom+3#cve #cve-2025-27831 Join the discussion	CVE Database V5	03/25/2025, 00:00:00 UTC Added: 11/03/2025, 20:49:06 UTC
CVE-2024-29510: n/aCVE-2024-29510 0 Artifex Ghostscript before 10.03.1 allows memory corruption, and SAFER sandbox bypass, via format string injection with a uniprint device. MediumVulnerabilityUnited StatesGermanyUnited Kingdom+7#cve #cve-2024-29510 Join the discussion	CVE Database V5	07/03/2024, 00:00:00 UTC Added: 02/25/2026, 21:46:08 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional