Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

JVN Japan

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

GCP Compute Engine Security

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

netsurf-disclosure

NetSurf 3.11 is vulnerable to Use After Free in dom_node_set_text_content function.

CVE-2025-29699 identifies a Use After Free (CWE-416) vulnerability in the dom_node_set_text_content function of NetSurf version 3.11. Use After Free occurs when a program continues to use memory after it has been freed, potentially leading to memory corruption, crashes, or arbitrary code execution. This vulnerability can be triggered remotely over the network without requiring any privileges or user interaction, indicating that an attacker can exploit it by sending crafted web content to a vulnerable NetSurf browser instance. The CVSS score of 6.5 (medium severity) reflects that while the attack vector is network-based and requires low complexity, the impact is limited to integrity and availability, with no direct confidentiality loss. The vulnerability affects the integrity of the browser's DOM processing and can cause application crashes or potentially allow an attacker to manipulate the browser's behavior. No patches or exploits are currently publicly available, but the vulnerability is published and should be addressed by developers. Given NetSurf's niche usage compared to mainstream browsers, the exposure is somewhat limited but still relevant for environments relying on it for lightweight or embedded browsing needs.

Detailed information about CVE-2025-29699: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2025-29699: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-29699: n/a

An issue in NetSurf v.3.11 allows a remote attacker to execute arbitrary code via the dom_node_normalize function

CVE-2024-51317 identifies a remote code execution vulnerability in NetSurf version 3.11, specifically within the dom_node_normalize function. This function, part of the DOM processing in the browser, improperly handles input, leading to a command injection vulnerability classified under CWE-77. An attacker can exploit this flaw remotely over the network without requiring any privileges or user interaction, enabling arbitrary code execution on the victim's system. The vulnerability impacts confidentiality and integrity by allowing unauthorized code execution, though availability is not directly affected. The CVSS 3.1 base score of 6.5 reflects a medium severity, considering the ease of exploitation (low attack complexity), no privileges required, and no user interaction needed. No patches or fixes are currently available, and no known exploits have been reported in the wild. NetSurf is a lightweight, open-source web browser often used in embedded systems or niche environments, which may limit the scope but also complicate detection and mitigation. The vulnerability's presence in a core DOM function suggests that any web content processed by the browser could trigger the exploit, posing a risk to users and systems relying on NetSurf for web access or embedded web rendering.

Detailed information about CVE-2024-51317: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-51317: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-51317: n/a

An issue in NetSurf v3.11 causes the application to read uninitialized heap memory when creating a dom_event structure.

CVE-2025-45663 identifies a vulnerability in NetSurf version 3.11 where the application improperly handles memory allocation when creating a dom_event structure. Specifically, the application reads uninitialized heap memory, which corresponds to memory that has been allocated but not initialized with defined data. This results in the potential leakage of residual memory content that could contain sensitive information. The vulnerability is classified under CWE-244 (Improper Handling of Uninitialized Data). According to the CVSS 3.1 vector, the attack vector is network-based (AV:N), requires no privileges (PR:N), and no user interaction (UI:N), with an unchanged scope (S:U). The impact affects confidentiality (C:L) with no impact on integrity (I:N) or availability (A:L), indicating a limited denial of service potential. The CVSS score of 6.5 reflects a medium severity level. No patches or known exploits are currently available, suggesting that exploitation is possible but not yet observed in the wild. The vulnerability could be leveraged by attackers to extract partial memory contents remotely, potentially revealing sensitive information such as session tokens or other data residing in heap memory. However, the lack of integrity or full availability impact limits the overall damage. The issue arises from improper memory initialization practices in the NetSurf browser's DOM event handling code, which is critical for web page event processing. This vulnerability highlights the importance of secure memory management in browser development to prevent information leakage.

Detailed information about CVE-2025-45663: n/a. Get real-time updates, technical details, and mitigation strategies.


CVE-2025-29699: n/aCVE-2025-29699 0 NetSurf 3.11 is vulnerable to Use After Free in dom_node_set_text_content function. MediumVulnerabilityUnited KingdomGermanyFrance+2#cve #cve-2025-29699 Join the discussion	CVE Database V5	11/03/2025, 00:00:00 UTC Added: 11/03/2025, 15:03:58 UTC
CVE-2024-51317: n/aCVE-2024-51317 0 An issue in NetSurf v.3.11 allows a remote attacker to execute arbitrary code via the dom_node_normalize function MediumVulnerabilityUnited KingdomGermanyNetherlands+2#cve #cve-2024-51317 Join the discussion	CVE Database V5	11/03/2025, 00:00:00 UTC Added: 11/03/2025, 15:03:58 UTC
CVE-2025-45663: n/aCVE-2025-45663 0 An issue in NetSurf v3.11 causes the application to read uninitialized heap memory when creating a dom_event structure. MediumVulnerabilityUnited KingdomGermanyFrance+3#cve #cve-2025-45663 Join the discussion	CVE Database V5	11/03/2025, 00:00:00 UTC Added: 11/03/2025, 15:03:58 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional