Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

htmldoc

HTMLDOC v1.9.18 contains a buffer overflow in parse_pre function,ps-pdf.cxx:5681.

CVE-2024-46478 identifies a critical security vulnerability in HTMLDOC version 1.9.18, a tool commonly used for converting HTML to PDF or PostScript documents. The vulnerability is a buffer overflow located in the parse_pre function within the ps-pdf.cxx source file at line 5681. Buffer overflows occur when a program writes more data to a buffer than it can hold, overwriting adjacent memory and potentially allowing arbitrary code execution. This specific flaw is classified under CWE-120, indicating a classic buffer overflow due to improper input validation or bounds checking. The vulnerability is remotely exploitable without requiring any privileges or user interaction, as indicated by the CVSS vector (AV:N/AC:L/PR:N/UI:N). The impact is severe, affecting confidentiality, integrity, and availability, with a CVSS v3.1 base score of 9.8 (critical). Although no public exploits have been reported yet, the nature of the vulnerability makes it a prime candidate for exploitation once weaponized. The lack of available patches at the time of publication increases the urgency for organizations to implement interim mitigations. The vulnerability could allow attackers to execute arbitrary code remotely, potentially leading to full system compromise, data theft, or denial of service. Given HTMLDOC's usage in automated document generation workflows, this vulnerability could be leveraged in supply chain attacks or targeted intrusions.

Detailed information about CVE-2024-46478: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-46478: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-46478: n/a

HTMLDOC before 1.9.19 has an out-of-bounds write in parse_paragraph in ps-pdf.cxx because of an attempt to strip leading whitespace from a whitespace-only node.

CVE-2024-45508 is a critical security vulnerability identified in the HTMLDOC software, specifically affecting versions before 1.9.19. The vulnerability arises from an out-of-bounds write in the parse_paragraph function located in the ps-pdf.cxx source file. This function attempts to strip leading whitespace from nodes that contain only whitespace characters. Due to improper bounds checking, this operation can write outside the allocated memory buffer, leading to memory corruption. This type of flaw is classified under CWE-787 (Out-of-bounds Write). The vulnerability is remotely exploitable without requiring any authentication or user interaction, as indicated by the CVSS vector (AV:N/AC:L/PR:N/UI:N). The impact of exploitation is severe, potentially allowing attackers to execute arbitrary code, cause denial of service, or gain unauthorized access to sensitive information, affecting confidentiality, integrity, and availability. Although no public exploits have been reported yet, the high CVSS score of 9.8 reflects the critical nature of the issue. The vulnerability affects any environment where HTMLDOC is used to convert HTML to PDF or PostScript, particularly in automated document processing pipelines. The lack of a patch link suggests that a fix may be forthcoming or that users should upgrade to version 1.9.19 or later once released.

Detailed information about CVE-2024-45508: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-45508: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-45508: n/a


CVE-2024-46478: n/aCVE-2024-46478 0 HTMLDOC v1.9.18 contains a buffer overflow in parse_pre function,ps-pdf.cxx:5681. CriticalVulnerabilityUnited StatesGermanyUnited Kingdom+11#cve #cve-2024-46478 Join the discussion	CVE Database V5	10/24/2024, 00:00:00 UTC Added: 02/25/2026, 21:43:28 UTC
CVE-2024-45508: n/aCVE-2024-45508 0 HTMLDOC before 1.9.19 has an out-of-bounds write in parse_paragraph in ps-pdf.cxx because of an attempt to strip leading whitespace from a whitespace-only node. CriticalVulnerabilityUnited StatesGermanyUnited Kingdom+7#cve #cve-2024-45508 Join the discussion	CVE Database V5	09/01/2024, 00:00:00 UTC Added: 02/25/2026, 21:43:09 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional