Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

AlienVault OTX General

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit NetSec

Reddit Cybersecurity

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

vul-report

Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to execute arbitrary code via the ReadData() function when reading images in RAS format.

CVE-2024-28580 identifies a buffer overflow vulnerability in FreeImage version 3.19.0, specifically in the ReadData() function responsible for parsing RAS image format files. Buffer overflow vulnerabilities occur when a program writes more data to a buffer than it can hold, potentially overwriting adjacent memory and enabling arbitrary code execution. In this case, a local attacker can exploit this flaw by providing a specially crafted RAS image file to the vulnerable FreeImage library, triggering the overflow during image parsing. The vulnerability is notable because it requires no privileges or user interaction, increasing its exploitability on affected systems. The CVSS v3.1 score of 8.4 reflects the high impact on confidentiality, integrity, and availability, as successful exploitation could lead to full system compromise. FreeImage is widely used in various open-source and commercial applications for image processing, making this vulnerability relevant to a broad range of software environments. No patches or exploit code are currently publicly available, but the risk remains significant due to the nature of the vulnerability and the criticality of the affected component. The weakness is classified under CWE-121 (Stack-based Buffer Overflow), a common and dangerous software flaw. Organizations relying on FreeImage should prepare for remediation and consider temporary mitigations to reduce exposure.

Detailed information about CVE-2024-28580: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-28580: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-28580: n/a

Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to cause a denial of service (DoS) via the jpeg_read_exif_profile() function when reading images in JPEG format.

CVE-2024-28573 identifies a buffer overflow vulnerability in the FreeImage open source library version 3.19.0, specifically within the jpeg_read_exif_profile() function responsible for parsing EXIF metadata in JPEG images. Buffer overflow (CWE-121) occurs when the function improperly handles input data size, leading to memory corruption. This vulnerability can be exploited by a local attacker who supplies a maliciously crafted JPEG file to an application using FreeImage for image processing. Exploitation results in a denial of service (DoS) by crashing the application, potentially causing service interruptions or application instability. The vulnerability requires local access (attack vector: local), no privileges, and no user interaction, limiting remote exploitation possibilities. The CVSS v3.1 base score is 6.2, reflecting medium severity due to the impact on availability only and the local attack vector. No known public exploits or patches have been reported yet, indicating the need for proactive mitigation. This vulnerability is significant for software relying on FreeImage for image handling, especially in environments where local users can supply image files.

Detailed information about CVE-2024-28573: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-28573: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-28573: n/a

Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to execute arbitrary code via the AssignPixel() function when reading images in TIFF format.

CVE-2024-28566 identifies a buffer overflow vulnerability in the FreeImage open-source library, specifically version 3.19.0 [r1909]. The flaw exists within the AssignPixel() function, which is responsible for assigning pixel data when reading TIFF format images. A buffer overflow occurs when the function improperly handles image data, allowing an attacker with local access to craft malicious TIFF files that trigger arbitrary code execution. This vulnerability does not require privileges or user interaction, increasing its risk profile. The vulnerability is classified under CWE-121 (Stack-based Buffer Overflow), indicating that the overflow can overwrite critical memory areas, potentially leading to control flow hijacking. The CVSS 3.1 base score is 8.4, reflecting high impact on confidentiality, integrity, and availability. Although no patches or exploits are currently documented, the vulnerability demands urgent attention due to the widespread use of FreeImage in image processing applications across various industries. The lack of known exploits suggests it is either newly discovered or not yet weaponized, but the ease of exploitation through crafted TIFF files makes it a significant threat vector for local attackers.

Detailed information about CVE-2024-28566: n/a. Get real-time updates, technical details, and mitigation strategies.


CVE-2024-28580: n/aCVE-2024-28580 0 Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to execute arbitrary code via the ReadData() function when reading images in RAS format. HighVulnerabilityUnited StatesGermanyChina+7#cve #cve-2024-28580 Join the discussion	CVE Database V5	03/20/2024, 00:00:00 UTC Added: 02/25/2026, 21:45:55 UTC
CVE-2024-28573: n/aCVE-2024-28573 0 Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to cause a denial of service (DoS) via the jpeg_read_exif_profile() function when reading images in JPEG format. MediumVulnerabilityUnited StatesGermanyJapan+7#cve #cve-2024-28573 Join the discussion	CVE Database V5	03/20/2024, 00:00:00 UTC Added: 02/25/2026, 21:45:55 UTC
CVE-2024-28566: n/aCVE-2024-28566 0 Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to execute arbitrary code via the AssignPixel() function when reading images in TIFF format. HighVulnerabilityUnited StatesGermanyJapan+7#cve #cve-2024-28566 Join the discussion	CVE Database V5	03/20/2024, 00:00:00 UTC Added: 02/25/2026, 21:45:54 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional