Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

GCP Compute Engine Security

JVN Japan

AWS Security Bulletins

GCP Kubernetes Security

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

gifsicle

gifsicle-1.94 was found to have a floating point exception (FPE) vulnerability via resize_stream at src/xform.c.

CVE-2023-46009 identifies a floating point exception vulnerability in gifsicle version 1.94, specifically within the resize_stream function located in src/xform.c. Gifsicle is a widely used command-line tool for creating, editing, and optimizing GIF images. The vulnerability arises when processing certain crafted GIF images that cause the floating point operations in the resize_stream function to fail, leading to an exception. This exception can cause the application to crash or terminate unexpectedly, resulting in a denial of service condition. While no exploits have been reported in the wild, the vulnerability poses a risk to any system that processes untrusted GIF images using gifsicle 1.94 or earlier. The lack of a CVSS score suggests the vulnerability is newly disclosed and not yet fully assessed. The vulnerability does not appear to require authentication or user interaction beyond supplying a malicious GIF file. The scope of affected systems includes any software or services that incorporate gifsicle for image processing, which can be found in web servers, content management systems, and media processing pipelines. The floating point exception could be triggered remotely by an attacker supplying a malicious GIF file, making exploitation relatively straightforward in environments where untrusted images are processed.

Detailed information about CVE-2023-46009: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2023-46009: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2023-46009: n/a

Gifsicle through 1.94, if deployed in a way that allows untrusted input to affect Gif_Realloc calls, might allow a denial of service (memory consumption). NOTE: this has been disputed by multiple parties because the Gifsicle code is not commonly used for unattended operation in which new input arrives for a long-running process, does not ship with functionality to link it into another application as a library, and does not have realistic use cases in which an adversary controls the entire command line.

CVE-2023-44821 identifies a vulnerability in Gifsicle, a command-line tool for creating, editing, and optimizing GIF images, up to version 1.94. The issue arises when untrusted input influences the Gif_Realloc function calls, potentially causing excessive memory consumption leading to a denial of service (DoS). This could theoretically allow an attacker to exhaust system memory by crafting malicious GIF inputs that trigger repeated or large memory reallocations. However, the vulnerability's practical impact is disputed by multiple parties because Gifsicle is not typically used as a long-running service that continuously processes untrusted input, nor is it designed to be embedded as a library in other applications. Its primary use case is as a standalone command-line utility, where the attacker would need control over the entire command line invocation, which is an uncommon threat model. No CVSS score has been assigned, and no patches or known exploits have been reported. The vulnerability highlights a potential risk in scenarios where Gifsicle is integrated into automated workflows or server-side image processing pipelines that accept untrusted GIF files. In such cases, an attacker could cause resource exhaustion, impacting availability. The lack of widespread unattended use and the requirement for command line control limit the exploitability and scope of this vulnerability.

Detailed information about CVE-2023-44821: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2023-44821: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2023-44821: n/a


CVE-2023-46009: n/aCVE-2023-46009 0 gifsicle-1.94 was found to have a floating point exception (FPE) vulnerability via resize_stream at src/xform.c. UnknownVulnerabilityGermanyFranceUnited Kingdom+3#cve #cve-2023-46009 Join the discussion	CVE Database V5	10/18/2023, 00:00:00 UTC Added: 11/04/2025, 18:34:29 UTC
CVE-2023-44821: n/aCVE-2023-44821 0 Gifsicle through 1.94, if deployed in a way that allows untrusted input to affect Gif_Realloc calls, might allow a denial of service (memory consumption). NOTE: this has been disputed by multiple parties because the Gifsicle code is not commonly used for unattended operation in which new input arrives for a long-running process, does not ship with functionality to link it into another application as a library, and does not have realistic use cases in which an adversary controls the entire command line. UnknownVulnerabilityGermanyFranceUnited Kingdom+2#cve #cve-2023-44821 Join the discussion	CVE Database V5	10/09/2023, 00:00:00 UTC Added: 11/04/2025, 18:19:15 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional