Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

exiftool

A vulnerability was detected in Exiftool up to 13.53. Impacted is the function Process_mrld of the file lib/Image/ExifTool/GM.pm of the component JPEG/QuickTime/MOV/MP4. The manipulation of the argument -ee results in code injection. Attacking locally is a requirement. Upgrading to version 13.54 is recommended to address this issue. The patch is identified as 5a8b6b6ead12b39e3f32f978a4efd0233facbb01. It is suggested to upgrade the affected component. The fix in the source code mentions: "[J]ust to be safe, probably never happen".

This vulnerability involves code injection through the Process_mrld function in Exiftool's handling of certain media file formats. The flaw is triggered by manipulating the -ee argument, enabling local attackers with low privileges to execute injected code. The vulnerability affects all versions from 13.0 through 13.53. The vendor has released version 13.54 containing a patch that mitigates this issue. The patch was applied to the source code with a note indicating the fix is precautionary. The CVSS 4.0 base score is 4.8, reflecting medium severity with local attack vector and low complexity.

Detailed information about CVE-2026-7580: Code Injection in Exiftool affecting null Exiftool. Get real-time updates, technical details, and mitigation strategie

CVE-2026-7580: Code Injection in Exiftool - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-7580: Code Injection in Exiftool

CVE-2026-3102 is a medium severity OS command injection vulnerability in exiftool on macOS. It affects the SetMacOSTags function in the PNG File Parser component, where manipulation of the DateTimeOriginal argument can lead to command injection. This vulnerability affects exiftool versions 13.0 through 13.49. Upgrading to version 13.50 addresses the issue.

This vulnerability in exiftool versions up to 13.49 on macOS allows an attacker to perform OS command injection via the DateTimeOriginal argument in the SetMacOSTags function of the PNG File Parser. The flaw permits remote exploitation and was publicly disclosed. The issue is resolved by upgrading to exiftool version 13.50.

Detailed information about CVE-2026-3102: OS Command Injection in exiftool affecting null exiftool. Get real-time updates, technical details, and mitigation str

CVE-2026-3102: OS Command Injection in exiftool - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-3102: OS Command Injection in exiftool


CVE-2026-7580: Code Injection in ExiftoolCVE-2026-7580 0 A vulnerability was detected in Exiftool up to 13.53. Impacted is the function Process_mrld of the file lib/Image/ExifTool/GM.pm of the component JPEG/QuickTime/MOV/MP4. The manipulation of the argument -ee results in code injection. Attacking locally is a requirement. Upgrading to version 13.54 is recommended to address this issue. The patch is identified as 5a8b6b6ead12b39e3f32f978a4efd0233facbb01. It is suggested to upgrade the affected component. The fix in the source code mentions: "[J]ust to be safe, probably never happen". MediumVulnerability#cve #cve-2026-7580 Join the discussion	CVE Database V5	05/01/2026, 12:00:16 UTC Added: 05/01/2026, 19:36:23 UTC
CVE-2026-3102: OS Command Injection in exiftoolCVE-2026-3102 0 CVE-2026-3102 is a medium severity OS command injection vulnerability in exiftool on macOS. It affects the SetMacOSTags function in the PNG File Parser component, where manipulation of the DateTimeOriginal argument can lead to command injection. This vulnerability affects exiftool versions 13.0 through 13.49. Upgrading to version 13.50 addresses the issue. MediumVulnerability#cve #cve-2026-3102 Join the discussion	CVE Database V5	02/24/2026, 14:32:13 UTC Added: 02/24/2026, 14:47:12 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional