Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

cvc5

A segmentation fault in CVC5 Solver v1.1.3 allows attackers to cause a Denial of Service (DoS) via a crafted SMT-LIB input file containing the `set-logic` command with specific formatting errors.

CVE-2024-37795 identifies a vulnerability in CVC5 Solver version 1.1.3, a widely used SMT (Satisfiability Modulo Theories) solver employed in formal verification, automated theorem proving, and symbolic computation. The flaw arises from improper input validation when parsing the SMT-LIB input format, specifically the 'set-logic' command. A crafted input file with specific formatting errors causes the solver to dereference invalid memory, resulting in a segmentation fault and subsequent denial of service. This vulnerability is classified under CWE-125 (Out-of-bounds Read), indicating that the software reads memory outside the intended buffer boundaries. The CVSS v3.1 score of 7.5 (high) reflects the ease of remote exploitation without authentication or user interaction, and the impact is limited to availability disruption without compromising confidentiality or integrity. No patches were available at the time of publication, and no active exploits have been reported. However, the vulnerability poses a risk to environments relying on CVC5 for critical automated reasoning tasks, where service interruptions could delay or halt verification workflows.

Detailed information about CVE-2024-37795: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-37795: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-37795: n/a

Improper input validation in CVC5 Solver v1.1.3 allows attackers to cause a Denial of Service (DoS) via a crafted SMT2 input file.

CVE-2024-37794 identifies a vulnerability in the CVC5 Solver version 1.1.3, a tool widely used for solving SMT (Satisfiability Modulo Theories) problems. The root cause is improper input validation (CWE-20) of SMT2 input files, which allows an attacker to craft malicious inputs that cause the solver to crash or become unresponsive, resulting in a Denial of Service (DoS). The vulnerability is remotely exploitable without requiring any privileges or user interaction, as indicated by the CVSS vector (AV:N/AC:L/PR:N/UI:N). The impact is limited to availability, with no confidentiality or integrity compromise. Although no exploits have been observed in the wild, the high CVSS score (7.5) reflects the ease of exploitation and potential operational disruption. The CVC5 solver is commonly employed in formal verification, automated theorem proving, and symbolic computation in both academic and industrial environments. The lack of a published patch necessitates proactive mitigation strategies such as input sanitization, limiting exposure of the solver to untrusted inputs, and monitoring for anomalous usage patterns. This vulnerability underscores the importance of robust input validation in complex solver software to maintain service reliability.

Detailed information about CVE-2024-37794: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-37794: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-37794: n/a


CVE-2024-37795: n/aCVE-2024-37795 0 A segmentation fault in CVC5 Solver v1.1.3 allows attackers to cause a Denial of Service (DoS) via a crafted SMT-LIB input file containing the `set-logic` command with specific formatting errors. HighVulnerabilityUnited StatesGermanyJapan+7#cve #cve-2024-37795 Join the discussion	CVE Database V5	06/17/2024, 00:00:00 UTC Added: 02/25/2026, 21:41:03 UTC
CVE-2024-37794: n/aCVE-2024-37794 0 Improper input validation in CVC5 Solver v1.1.3 allows attackers to cause a Denial of Service (DoS) via a crafted SMT2 input file. HighVulnerabilityUnited StatesGermanyUnited Kingdom+7#cve #cve-2024-37794 Join the discussion	CVE Database V5	06/17/2024, 00:00:00 UTC Added: 02/25/2026, 21:41:03 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional