Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

AlienVault OTX General

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit NetSec

Reddit Cybersecurity

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

fontforge

FontForge v20230101 was discovered to contain a memory leak via the utf7toutf8_copy function at /fontforge/sfd.c.

CVE-2025-50951 identifies a memory leak vulnerability in FontForge version 20230101, specifically within the utf7toutf8_copy function located in the sfd.c source file. The vulnerability is classified under CWE-401, indicating improper release of memory, which leads to a gradual increase in memory consumption during the processing of certain font data encoded in UTF-7. This memory leak can be triggered remotely without requiring any privileges but does require user interaction, such as opening or processing a crafted font file. The CVSS v3.1 score of 6.5 reflects a medium severity with an attack vector of network (AV:N), low attack complexity (AC:L), no privileges required (PR:N), user interaction required (UI:R), unchanged scope (S:U), no impact on confidentiality or integrity (C:N/I:N), but a high impact on availability (A:H). The consequence of this vulnerability is a denial of service condition, where the application or system may crash or become unresponsive due to exhausted memory resources. No known exploits have been reported in the wild, and no patches have been published at the time of this analysis. FontForge is an open-source font editor widely used in graphic design, publishing, and software development environments, which makes this vulnerability relevant for organizations relying on this tool for font creation or manipulation. The lack of a patch necessitates proactive monitoring and mitigation to prevent potential exploitation.

Detailed information about CVE-2025-50951: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2025-50951: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-50951: n/a

FontForge v20230101 was discovered to contain a memory leak via the component DlgCreate8.

CVE-2025-50949 is a vulnerability discovered in FontForge version 20230101, specifically involving a memory leak in the DlgCreate8 component. A memory leak occurs when a program incorrectly manages memory allocations, failing to release unused memory, which can lead to increased memory consumption and eventual exhaustion of system resources. This vulnerability is classified under CWE-401, indicating improper release of memory. The CVSS v3.1 base score is 6.5, reflecting a medium severity level. The vector indicates the attack can be performed remotely (AV:N), requires low attack complexity (AC:L), no privileges (PR:N), but does require user interaction (UI:R). The impact is limited to availability (A:H), with no impact on confidentiality or integrity. Exploiting this vulnerability would typically involve convincing a user to open a maliciously crafted font file using the vulnerable FontForge version, causing the application to leak memory and potentially crash or become unresponsive. No patches or fixes have been released at the time of publication, and no known exploits are reported in the wild. The vulnerability could be leveraged to cause denial-of-service conditions in environments where FontForge is used for font creation or editing, impacting workflows dependent on this tool.

Detailed information about CVE-2025-50949: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2025-50949: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-50949: n/a

Splinefont in FontForge through 20230101 allows command injection via crafted filenames.

CVE-2024-25081 is a command injection vulnerability identified in the Splinefont component of FontForge, an open-source font editor widely used for creating and modifying font files. The vulnerability arises from improper handling of crafted filenames, which can be manipulated to execute arbitrary commands on the host system. Specifically, when a maliciously crafted filename is processed, it can trigger command injection (CWE-77), allowing an attacker to execute system-level commands. The CVSS 3.1 base score is 4.2, reflecting a medium severity level. The attack vector is local (AV:L), requiring the attacker to have low privileges (PR:L) and necessitating user interaction (UI:R), such as opening or importing a malicious font file. The attack complexity is high (AC:H), indicating that exploitation is not straightforward and requires specific conditions. The impact on confidentiality, integrity, and availability is limited (C:L/I:L/A:L), meaning that while some data or system integrity could be compromised, the overall damage is constrained. No patches or fixes have been published yet, and no known exploits are reported in the wild, suggesting that the vulnerability is newly disclosed and not yet actively exploited. The vulnerability affects all versions of FontForge up to the date of disclosure (through 20230101).

Detailed information about CVE-2024-25081: n/a. Get real-time updates, technical details, and mitigation strategies.


CVE-2025-50951: n/aCVE-2025-50951 0 FontForge v20230101 was discovered to contain a memory leak via the utf7toutf8_copy function at /fontforge/sfd.c. MediumVulnerabilityGermanyFranceUnited Kingdom+4#cve #cve-2025-50951 Join the discussion	CVE Database V5	10/23/2025, 00:00:00 UTC Added: 10/23/2025, 15:49:38 UTC
CVE-2025-50949: n/aCVE-2025-50949 0 FontForge v20230101 was discovered to contain a memory leak via the component DlgCreate8. MediumVulnerabilityGermanyFranceUnited Kingdom+5#cve #cve-2025-50949 Join the discussion	CVE Database V5	10/23/2025, 00:00:00 UTC Added: 10/23/2025, 15:29:28 UTC
CVE-2024-25081: n/aCVE-2024-25081 0 Splinefont in FontForge through 20230101 allows command injection via crafted filenames. MediumVulnerabilityGermanyFranceUnited Kingdom+5#cve #cve-2024-25081 Join the discussion	CVE Database V5	02/26/2024, 00:00:00 UTC Added: 11/04/2025, 18:35:09 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional