Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

AlienVault OTX General

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit NetSec

Reddit Cybersecurity

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

tpm2.0

An out-of-bounds write vulnerability exists in TPM2.0's Module Library allowing writing of a 2-byte data past the end of TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully exploit this vulnerability can lead to denial of service (crashing the TPM chip/process or rendering it unusable) and/or arbitrary code execution in the TPM context.

CVE-2023-1017 is a security vulnerability classified as CWE-787 (Out-of-bounds Write) found in the Trusted Computing Group's TPM2.0 Module Library, specifically in version 1.59. The vulnerability arises in the CryptParameterDecryption routine, where the code erroneously writes 2 bytes beyond the allocated buffer boundary for TPM2.0 commands. This out-of-bounds write can corrupt adjacent memory, leading to unpredictable behavior including denial of service by crashing the TPM chip or its managing process. More critically, it may allow an attacker to execute arbitrary code within the TPM context, potentially compromising the TPM's security guarantees. The TPM (Trusted Platform Module) is a hardware-based security component embedded in many modern computing devices, providing cryptographic functions such as secure key storage, platform integrity measurements, and attestation. Because the TPM is foundational to system security, vulnerabilities in its firmware or software stack can have severe consequences. Exploitation requires the attacker to send crafted TPM commands that trigger the out-of-bounds write. There is no indication that user interaction is needed, but the attacker must have the capability to communicate with the TPM interface, which may be restricted in many environments. No public exploits or active exploitation have been reported to date. No CVSS score has been assigned yet. The Trusted Computing Group has not published patches at the time of this report, so mitigation relies on limiting access to TPM interfaces and monitoring for suspicious activity. This vulnerability affects TPM2.0 version 1.59, which is widely deployed in enterprise and government systems across Europe, especially in sectors relying on hardware-based security for compliance and data protection.

Detailed information about CVE-2023-1017: CWE-787 Out-of-bounds Write in Trusted Computing Group TPM2.0 affecting Trusted Computing Group TPM2.0. Get real-time 

CVE-2023-1017: CWE-787 Out-of-bounds Write in Trusted Computing Group TPM2.0 - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2023-1017: CWE-787 Out-of-bounds Write in Trusted Computing Group TPM2.0

An out-of-bounds read vulnerability exists in TPM2.0's Module Library allowing a 2-byte read past the end of a TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully exploit this vulnerability can read or access sensitive data stored in the TPM.

CVE-2023-1018 is a medium-severity vulnerability classified as CWE-125 (Out-of-bounds Read) affecting the Trusted Computing Group's TPM2.0 Module Library, specifically version 1.59. The vulnerability arises in the CryptParameterDecryption routine, where the code reads two bytes beyond the boundary of a TPM2.0 command buffer. This out-of-bounds read can allow an attacker with local privileges to access sensitive data stored within the TPM, such as cryptographic keys or other protected information. The TPM (Trusted Platform Module) is a hardware-based security component widely used for secure key storage, platform integrity measurements, and cryptographic operations. The vulnerability does not require user interaction but does require the attacker to have local privileges, which limits the attack vector to users or processes already on the system. The CVSS vector (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) indicates that the attack is local, requires low complexity, privileges, no user interaction, and impacts confidentiality but not integrity or availability. No public exploits or patches are currently available, but the vulnerability is published and should be addressed promptly. The TPM2.0 version 1.59 is specifically affected, so systems using this version or embedded TPMs with this firmware are at risk. The vulnerability could lead to unauthorized disclosure of sensitive TPM data, undermining the security guarantees provided by the TPM, potentially affecting secure boot, disk encryption keys, or authentication credentials.

Detailed information about CVE-2023-1018: CWE-125 Out-of-bounds Read in Trusted Computing Group TPM2.0 affecting Trusted Computing Group TPM2.0. Get real-time u

CVE-2023-1018: CWE-125 Out-of-bounds Read in Trusted Computing Group TPM2.0 - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2023-1018: CWE-125 Out-of-bounds Read in Trusted Computing Group TPM2.0


CVE-2023-1017: CWE-787 Out-of-bounds Write in Trusted Computing Group TPM2.0CVE-2023-1017 0 An out-of-bounds write vulnerability exists in TPM2.0's Module Library allowing writing of a 2-byte data past the end of TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully exploit this vulnerability can lead to denial of service (crashing the TPM chip/process or rendering it unusable) and/or arbitrary code execution in the TPM context. UnknownVulnerabilityGermanyFranceUnited Kingdom+5#cve #cve-2023-1017 #cwe-787 Join the discussion	CVE Database V5	02/28/2023, 18:02:27 UTC Added: 11/04/2025, 19:25:07 UTC
CVE-2023-1018: CWE-125 Out-of-bounds Read in Trusted Computing Group TPM2.0CVE-2023-1018 0 An out-of-bounds read vulnerability exists in TPM2.0's Module Library allowing a 2-byte read past the end of a TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully exploit this vulnerability can read or access sensitive data stored in the TPM. MediumVulnerabilityGermanyFranceUnited Kingdom+4#cve #cve-2023-1018 #cwe-125 Join the discussion	CVE Database V5	02/28/2023, 17:54:33 UTC Added: 11/04/2025, 19:25:07 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional