Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Zero Day Initiative

Cisco Talos

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

LIEF

A security flaw has been discovered in lief-project LIEF up to 0.17.1. Affected by this issue is the function Parser::parse_binary of the file src/ELF/Parser.tcc of the component ELF Binary Parser. The manipulation results in null pointer dereference. The attack must be initiated from a local position. The exploit has been released to the public and may be used for attacks. Upgrading to version 0.17.2 can resolve this issue. The patch is identified as 81bd5d7ea0c390563f1c4c017c9019d154802978. It is recommended to upgrade the affected component.

CVE-2025-15504 identifies a null pointer dereference vulnerability in the LIEF (Library to Instrument Executable Formats) project, specifically affecting versions 0.17.0 and 0.17.1. The flaw resides in the ELF binary parser component, within the Parser::parse_binary function in the src/ELF/Parser.tcc source file. When parsing crafted ELF binaries, the function may dereference a null pointer due to insufficient validation or error handling, leading to a crash or denial of service. The vulnerability requires local access with low privileges to trigger, meaning an attacker must have the ability to execute code or interact with the vulnerable LIEF component on the host system. No user interaction or elevated privileges are necessary beyond local access. The vulnerability has a CVSS 4.8 (medium) score, reflecting limited impact and exploit complexity. The issue was publicly disclosed with an available proof-of-concept exploit, increasing the risk of exploitation. The LIEF project has addressed the vulnerability in version 0.17.2, with a patch identified by commit 81bd5d7ea0c390563f1c4c017c9019d154802978. LIEF is widely used in security research, malware analysis, and reverse engineering tools to parse and manipulate executable formats such as ELF, PE, and Mach-O. This vulnerability could impact any software or environment that integrates the vulnerable LIEF versions for ELF binary parsing, potentially causing crashes or denial of service conditions during binary analysis or instrumentation.

Detailed information about CVE-2025-15504: NULL Pointer Dereference in lief-project LIEF affecting lief-project LIEF. Get real-time updates, technical details, 

CVE-2025-15504: NULL Pointer Dereference in lief-project LIEF - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-15504: NULL Pointer Dereference in lief-project LIEF

An issue in LIEF v.0.14.1 allows a local attacker to obtain sensitive information via the name parameter of the machd_reader.c component.

This vulnerability in LIEF 0.14.1 involves improper handling of the name parameter in the machd_reader.c component, which allows a local attacker with low privileges and user interaction to obtain sensitive information. The CVSS vector indicates low attack complexity and limited confidentiality and integrity impact without availability impact. The weakness is categorized under CWE-457 (use of uninitialized variable or similar). No official patch or remediation details are available at this time.

Detailed information about CVE-2024-31636: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-31636: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-31636: n/a


CVE-2025-15504: NULL Pointer Dereference in lief-project LIEFCVE-2025-15504 0 A security flaw has been discovered in lief-project LIEF up to 0.17.1. Affected by this issue is the function Parser::parse_binary of the file src/ELF/Parser.tcc of the component ELF Binary Parser. The manipulation results in null pointer dereference. The attack must be initiated from a local position. The exploit has been released to the public and may be used for attacks. Upgrading to version 0.17.2 can resolve this issue. The patch is identified as 81bd5d7ea0c390563f1c4c017c9019d154802978. It is recommended to upgrade the affected component. MediumVulnerabilityUnited StatesGermanyFrance+7#cve #cve-2025-15504 Join the discussion	CVE Database V5	01/10/2026, 11:32:06 UTC Added: 01/10/2026, 11:41:36 UTC
CVE-2024-31636: n/aCVE-2024-31636 0 An issue in LIEF v.0.14.1 allows a local attacker to obtain sensitive information via the name parameter of the machd_reader.c component. LowVulnerability#cve #cve-2024-31636 Join the discussion	CVE Database V5	05/03/2024, 00:00:00 UTC Added: 02/25/2026, 21:47:00 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional