Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Krebs on Security

Palo Alto Unit 42

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

imagegear

An out-of-bounds write vulnerability exists in the dcm_pixel_data_decode functionality of Accusoft ImageGear 20.1. A specially crafted malformed file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger this vulnerability.

CVE-2023-32653 is a critical security vulnerability classified as an integer underflow (CWE-191) in the dcm_pixel_data_decode functionality of Accusoft ImageGear version 20.1. The vulnerability arises when processing specially crafted DICOM files, where an integer underflow leads to an out-of-bounds write operation in memory. This memory corruption can be exploited by an attacker to execute arbitrary code on the victim system. The attack vector requires no privileges and no user interaction beyond opening a malicious file, making it highly exploitable remotely if the application processes untrusted files. The CVSS v3.1 base score of 9.8 reflects the vulnerability's critical nature, with network attack vector, low attack complexity, no privileges required, and no user interaction needed. The impact includes full compromise of confidentiality, integrity, and availability of affected systems. Although no public exploits are currently known, the vulnerability's characteristics make it a prime target for attackers once exploit code becomes available. ImageGear is a software development toolkit used for image processing, including medical imaging formats like DICOM, which are prevalent in healthcare and related industries. The lack of available patches at the time of disclosure increases the urgency for organizations to implement interim mitigations and monitor for updates from Accusoft.

Detailed information about CVE-2023-32653: CWE-191: Integer Underflow (Wrap or Wraparound) in Accusoft ImageGear affecting Accusoft ImageGear. Get real-time upd

CVE-2023-32653: CWE-191: Integer Underflow (Wrap or Wraparound) in Accusoft ImageGear - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2023-32653: CWE-191: Integer Underflow (Wrap or Wraparound) in Accusoft ImageGear

Threats Tagged 'cve-2023-32653'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2023-32653'

Lead Pen Test Professional