Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit NetSec

Reddit Cybersecurity

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

AWS Security Bulletins

GCP Kubernetes Security

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

markdownify-mcp

A flaw has been found in zcaceres markdownify-mcp up to 1.1.0. This impacts the function saveToTempFile of the file src/Markdownify.ts of the component webpage-to-markdown/youtube-to-markdown/bing-search-to-markdown. This manipulation causes insufficiently random values. The attack is restricted to local execution. A high degree of complexity is needed for the attack. The exploitability is said to be difficult. The exploit has been published and may be used. The pull request to fix this issue awaits acceptance.

This vulnerability in zcaceres markdownify-mcp up to version 1.1.0 involves insufficient randomness in values generated by the saveToTempFile function in the src/Markdownify.ts file, impacting the webpage-to-markdown, youtube-to-markdown, and bing-search-to-markdown components. The flaw could potentially be leveraged by an attacker with local access, but exploitation is complex and difficult. Although an exploit is publicly available, no official patch or remediation has been released yet; a pull request addressing the issue is awaiting acceptance.

Detailed information about CVE-2026-14702: Insufficiently Random Values in zcaceres markdownify-mcp affecting zcaceres markdownify-mcp. Get real-time updates, t

CVE-2026-14702: Insufficiently Random Values in zcaceres markdownify-mcp - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-14702: Insufficiently Random Values in zcaceres markdownify-mcp

A Server-Side Request Forgery (SSRF) vulnerability was discovered in the webpage-to-markdown conversion feature of markdownify-mcp v0.0.2 and before. This vulnerability allows an attacker to bypass private IP restrictions through hostname-based bypass and HTTP redirect chains, enabling access to internal network services.

CVE-2025-65512 identifies a Server-Side Request Forgery (SSRF) vulnerability in the markdownify-mcp library, specifically in its webpage-to-markdown conversion functionality. SSRF vulnerabilities occur when an attacker can manipulate a server to make HTTP requests to arbitrary locations, often internal network resources that are otherwise inaccessible externally. In this case, markdownify-mcp versions 0.0.2 and earlier fail to properly enforce private IP restrictions. The vulnerability exploits hostname-based bypass techniques and HTTP redirect chains to circumvent these restrictions, allowing an attacker to reach internal services that should be protected by network segmentation or firewall rules. The vulnerability requires no authentication or user interaction, increasing its risk profile. The CVSS 3.1 base score of 7.5 reflects a high severity due to the potential confidentiality impact, as attackers can access sensitive internal endpoints. However, the vulnerability does not affect data integrity or availability. No patches have been published yet, and no active exploitation has been reported. The weakness is categorized under CWE-918, which covers SSRF issues. This vulnerability is particularly dangerous in environments where markdownify-mcp is used to process external URLs or user-supplied content, as it can be leveraged to perform internal reconnaissance or access sensitive services such as metadata APIs, internal admin panels, or databases. The lack of authentication and user interaction requirements means automated exploitation is feasible. Organizations relying on this library should urgently assess their exposure and implement mitigations to prevent SSRF attacks.

Detailed information about CVE-2025-65512: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2025-65512: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-65512: n/a


CVE-2026-14702: Insufficiently Random Values in zcaceres markdownify-mcpCVE-2026-14702 0 A flaw has been found in zcaceres markdownify-mcp up to 1.1.0. This impacts the function saveToTempFile of the file src/Markdownify.ts of the component webpage-to-markdown/youtube-to-markdown/bing-search-to-markdown. This manipulation causes insufficiently random values. The attack is restricted to local execution. A high degree of complexity is needed for the attack. The exploitability is said to be difficult. The exploit has been published and may be used. The pull request to fix this issue awaits acceptance. LowVulnerability#cve #cve-2026-14702 Join the discussion	CVE Database V5	07/05/2026, 04:00:08 UTC Added: 07/05/2026, 04:21:55 UTC
CVE-2025-65512: n/aCVE-2025-65512 0 A Server-Side Request Forgery (SSRF) vulnerability was discovered in the webpage-to-markdown conversion feature of markdownify-mcp v0.0.2 and before. This vulnerability allows an attacker to bypass private IP restrictions through hostname-based bypass and HTTP redirect chains, enabling access to internal network services. HighVulnerabilityGermanyFranceUnited Kingdom+3#cve #cve-2025-65512 Join the discussion	CVE Database V5	12/10/2025, 00:00:00 UTC Added: 12/10/2025, 20:34:55 UTC

Threat Intelligence Database

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threat Intelligence

Lead Pen Test Professional