Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Microsoft Security Blog

Google Project Zero

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

ffmate

A security vulnerability has been detected in welovemedia FFmate up to 2.0.15. This vulnerability affects the function Execute of the file /internal/service/ffmpeg/ffmpeg.go. The manipulation leads to argument injection. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVE-2026-3682 identifies an argument injection vulnerability in the welovemedia FFmate product, specifically affecting versions 2.0.0 through 2.0.15. The vulnerability resides in the Execute function within the /internal/service/ffmpeg/ffmpeg.go source file, where user-controllable input is improperly sanitized or validated before being passed as arguments to the ffmpeg command-line utility. This improper handling allows an attacker to inject arbitrary command-line arguments, potentially enabling execution of unintended commands or altering the behavior of the ffmpeg process. The attack vector is remote, meaning an attacker can exploit this vulnerability over the network without requiring user interaction. However, the CVSS vector indicates that some level of privileges (PR:L) is required, suggesting that the attacker must have limited local privileges or access to the system to initiate the attack. The vulnerability impacts confidentiality, integrity, and availability, as arbitrary command execution could lead to data leakage, system compromise, or service disruption. Despite public disclosure, no patches or vendor responses are currently available, and no known exploits have been observed in the wild. The CVSS 4.0 base score of 5.3 reflects a medium severity, balancing the ease of exploitation with the potential impact and required privileges.

Detailed information about CVE-2026-3682: Argument Injection in welovemedia FFmate affecting welovemedia FFmate. Get real-time updates, technical details, and m

CVE-2026-3682: Argument Injection in welovemedia FFmate - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-3682: Argument Injection in welovemedia FFmate

A weakness has been identified in welovemedia FFmate up to 2.0.15. This affects the function fireWebhook of the file /internal/service/webhook/webhook.go. Executing a manipulation can lead to server-side request forgery. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

CVE-2026-3681 is a server-side request forgery (SSRF) vulnerability affecting welovemedia's FFmate software up to version 2.0.15. The flaw exists in the fireWebhook function located in the /internal/service/webhook/webhook.go file. SSRF vulnerabilities occur when an attacker can manipulate a server-side application to make HTTP requests to arbitrary domains or internal network resources, potentially bypassing firewall restrictions and accessing sensitive internal services. In this case, the vulnerability allows remote attackers to craft malicious requests that the FFmate server will execute, potentially exposing internal systems or sensitive data. The vulnerability does not require user interaction but does require the attacker to have low privileges on the system, which may be achievable through other means. The CVSS 4.0 vector indicates network attack vector, low attack complexity, no privileges required, no user interaction, and low impact on confidentiality, integrity, and availability, resulting in a medium severity score of 5.3. The vendor was notified early but has not responded, and no patches or mitigations have been officially released. The exploit code is publicly available, increasing the risk of exploitation by attackers. This vulnerability is significant because SSRF can be leveraged as a pivot point for further internal network reconnaissance, data exfiltration, or exploitation of other internal vulnerabilities.

Detailed information about CVE-2026-3681: Server-Side Request Forgery in welovemedia FFmate affecting welovemedia FFmate. Get real-time updates, technical detai

CVE-2026-3681: Server-Side Request Forgery in welovemedia FFmate - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-3681: Server-Side Request Forgery in welovemedia FFmate


CVE-2026-3682: Argument Injection in welovemedia FFmateCVE-2026-3682 0 A security vulnerability has been detected in welovemedia FFmate up to 2.0.15. This vulnerability affects the function Execute of the file /internal/service/ffmpeg/ffmpeg.go. The manipulation leads to argument injection. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way. MediumVulnerabilityUnited StatesGermanyJapan+7#cve #cve-2026-3682 Join the discussion	CVE Database V5	03/07/2026, 23:32:07 UTC Added: 03/07/2026, 23:46:07 UTC
CVE-2026-3681: Server-Side Request Forgery in welovemedia FFmateCVE-2026-3681 0 A weakness has been identified in welovemedia FFmate up to 2.0.15. This affects the function fireWebhook of the file /internal/service/webhook/webhook.go. Executing a manipulation can lead to server-side request forgery. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. MediumVulnerabilityUnited StatesGermanyUnited Kingdom+7#cve #cve-2026-3681 Join the discussion	CVE Database V5	03/07/2026, 23:02:12 UTC Added: 03/07/2026, 23:16:04 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional