Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

fade-in

An out-of-bounds write vulnerability exists in the XML parser functionality of GCC Productions Inc. Fade In 4.2.0. A specially crafted .fadein file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability.

CVE-2025-53855 is an out-of-bounds write vulnerability classified under CWE-787, found in the XML parser component of GCC Productions Inc.'s Fade In software, version 4.2.0. The flaw arises when processing specially crafted .fadein files, which can cause the application to write data outside the intended memory bounds. This memory corruption can lead to arbitrary code execution, application crashes, or other undefined behaviors. The vulnerability requires an attacker to supply a malicious file that a user must open, implying user interaction is necessary. No elevated privileges are required to exploit this issue, but local access or delivery of the malicious file is essential. The CVSS v3.1 base score is 7.8, reflecting high severity with impacts on confidentiality, integrity, and availability. The vector indicates low attack complexity, no privileges required, but user interaction is needed. Currently, no public exploits or patches are available, increasing the urgency for defensive measures. The vulnerability affects only version 4.2.0 of Fade In, a screenwriting software used primarily in media production environments. Given the nature of the flaw, attackers could potentially execute arbitrary code within the context of the user running the application, leading to system compromise or data theft.

Detailed information about CVE-2025-53855: CWE-787: Out-of-bounds Write in GCC Productions Inc. Fade In affecting GCC Productions Inc. Fade In. Get real-time up

CVE-2025-53855: CWE-787: Out-of-bounds Write in GCC Productions Inc. Fade In - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-53855: CWE-787: Out-of-bounds Write in GCC Productions Inc. Fade In

A use-after-free vulnerability exists in the XML parser functionality of GCC Productions Inc. Fade In 4.2.0. A specially crafted .xml file can lead to heap-based memory corruption. An attacker can provide a malicious file to trigger this vulnerability.

CVE-2025-53814 is a use-after-free vulnerability classified under CWE-416 found in the XML parser component of GCC Productions Inc.'s Fade In software, version 4.2.0. The vulnerability occurs when the parser processes a specially crafted XML file, leading to heap-based memory corruption. This type of memory corruption can allow an attacker to execute arbitrary code, crash the application, or cause denial of service. The attack vector is local, requiring the victim to open a malicious XML file, which means user interaction is necessary but no prior privileges are required. The vulnerability affects the confidentiality, integrity, and availability of the system running the vulnerable software, as arbitrary code execution could lead to full system compromise. The CVSS v3.1 score is 7.8, reflecting high severity due to the combination of local attack vector, low attack complexity, no privileges required, and user interaction needed. Currently, there are no known public exploits or patches available, increasing the urgency for organizations to apply mitigations. Fade In is a screenwriting software used primarily in media production environments, which means the threat is particularly relevant to organizations in creative industries. The vulnerability's exploitation could be leveraged by attackers to gain unauthorized access or disrupt operations by delivering malicious XML files via email or other file-sharing methods.

Detailed information about CVE-2025-53814: CWE-416: Use After Free in GCC Productions Inc. Fade In affecting GCC Productions Inc. Fade In. Get real-time updates

CVE-2025-53814: CWE-416: Use After Free in GCC Productions Inc. Fade In - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-53814: CWE-416: Use After Free in GCC Productions Inc. Fade In


CVE-2025-53855: CWE-787: Out-of-bounds Write in GCC Productions Inc. Fade InCVE-2025-53855 0 An out-of-bounds write vulnerability exists in the XML parser functionality of GCC Productions Inc. Fade In 4.2.0. A specially crafted .fadein file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability. HighVulnerabilityUnited KingdomGermanyFrance+4#cve #cve-2025-53855 #cwe-787 Join the discussion	CVE Database V5	10/28/2025, 13:45:40 UTC Added: 10/28/2025, 13:51:46 UTC
CVE-2025-53814: CWE-416: Use After Free in GCC Productions Inc. Fade InCVE-2025-53814 0 A use-after-free vulnerability exists in the XML parser functionality of GCC Productions Inc. Fade In 4.2.0. A specially crafted .xml file can lead to heap-based memory corruption. An attacker can provide a malicious file to trigger this vulnerability. HighVulnerabilityUnited KingdomGermanyFrance+4#cve #cve-2025-53814 #cwe-416 Join the discussion	CVE Database V5	10/28/2025, 13:45:38 UTC Added: 10/28/2025, 13:51:46 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional