Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

AlienVault OTX General

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

In the Golang Chi web framework, the ClientIPFromXFF middleware skips any X-Forwarded-For entry in a configured trusted CIDR but never verifies that the direct TCP peer in http.Request.RemoteAddr belongs to that CIDR. A client that can reach the Go server directly can therefore append a trusted-looking proxy address and choose the client IP returned by middleware.GetClientIP.

This issue affects chi before 5.4.0.

The Golang Chi web framework's ClientIPFromXFF middleware is vulnerable because it skips any X-Forwarded-For entries from configured trusted CIDRs but does not verify that the actual TCP connection's remote address is within those CIDRs. Consequently, an attacker who can connect directly to the server can insert a trusted proxy IP in the X-Forwarded-For header and influence the client IP returned by middleware.GetClientIP. This vulnerability affects all chi versions prior to 5.4.0.

CVE-2026-114437 is a medium severity vulnerability in the Golang Chi web framework affecting versions before 5.4.0. The ClientIPFromXFF middleware improperly trusts X-Forwarded-For headers without verifying that the direct TCP peer address belongs to a trusted CIDR. This allows a client connecting d

CVE-2026-114437: CWE-348 Use of Less Trusted Source in go-chi chi

pgproto3

Memory-safety vulnerability in github.com/jackc/pgx/v5.

The vulnerability CVE-2026-33816 in github.com/jackc/pgx/v5/pgproto3 is a memory-safety issue classified under CWE-697 (Incorrect Comparison) and CWE-787 (Out-of-bounds Write). It allows an attacker to cause memory corruption through improper write operations, which can lead to denial of service or potentially arbitrary code execution by modifying control data such as return addresses. The vulnerability is remotely exploitable over the network without requiring privileges or user interaction. Red Hat's advisory confirms the severity and impact but notes that no suitable mitigation or patch currently meets their standards for widespread deployment. The vulnerability affects version 0 of the software as stated, with no further version details provided.

Detailed information about CVE-2026-33816: CWE-697 — Incorrect Comparison in github.com/jackc/pgx/v5 github.com/jackc/pgx/v5/pgproto3 affecting github.com/jackc

CVE-2026-33816: CWE-697 — Incorrect Comparison in github.com/jackc/pgx/v5 github.com/jackc/pgx/v5/pgproto3 - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-33816: CWE-697 — Incorrect Comparison in github.com/jackc/pgx/v5 github.com/jackc/pgx/v5/pgproto3

CVE-2026-33815 is a memory-safety vulnerability classified under CWE-129 (Improper Validation of Array Index) and CWE-787 (Out-of-bounds Write) in the github.com/jackc/pgx/v5/pgproto3 package. This flaw allows write operations beyond the intended memory bounds, potentially leading to memory corruption, modification of control data such as return addresses, unauthorized code execution, denial of service via crashes or restarts, and undefined or unexpected program states. The vulnerability is remotely exploitable over the network without user interaction or privileges. Red Hat's advisory notes the absence of an effective mitigation or fix that meets their deployment and stability standards at this time. The CVSS v3.1 base score is 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), reflecting critical severity.

Detailed information about CVE-2026-33815: CWE-129 — Improper Validation of Array Index in github.com/jackc/pgx/v5 github.com/jackc/pgx/v5/pgproto3 affecting gi

CVE-2026-33815: CWE-129 — Improper Validation of Array Index in github.com/jackc/pgx/v5 github.com/jackc/pgx/v5/pgproto3 - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-33815: CWE-129 — Improper Validation of Array Index in github.com/jackc/pgx/v5 github.com/jackc/pgx/v5/pgproto3


CVE-2026-114437: CWE-348 Use of Less Trusted Source in go-chi chiCVE-2026-114437 0 In the Golang Chi web framework, the ClientIPFromXFF middleware skips any X-Forwarded-For entry in a configured trusted CIDR but never verifies that the direct TCP peer in http.Request.RemoteAddr belongs to that CIDR. A client that can reach the Go server directly can therefore append a trusted-looking proxy address and choose the client IP returned by middleware.GetClientIP. This issue affects chi before 5.4.0. MediumVulnerability#cve #cve-2026-114437 #cwe-348 Join the discussion	CVE Database V5	10/21/2026, 13:52:25 UTC Added: 10/21/2026, 14:01:08 UTC
CVE-2026-33816: CWE-697 — Incorrect Comparison in github.com/jackc/pgx/v5 github.com/jackc/pgx/v5/pgproto3CVE-2026-33816 0 Memory-safety vulnerability in github.com/jackc/pgx/v5. CriticalVulnerability#cve #cve-2026-33816 #cwe-697 Join the discussion	CVE Database V5	04/07/2026, 15:19:24 UTC Added: 04/07/2026, 16:01:10 UTC
CVE-2026-33815: CWE-129 — Improper Validation of Array Index in github.com/jackc/pgx/v5 github.com/jackc/pgx/v5/pgproto3CVE-2026-33815 0 Memory-safety vulnerability in github.com/jackc/pgx/v5. CriticalVulnerability#cve #cve-2026-33815 #cwe-129 Join the discussion	CVE Database V5	04/07/2026, 15:19:24 UTC Added: 04/07/2026, 16:01:10 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional