Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Zero Day Initiative

Cisco Talos

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Tex Live 944e257 has a NULL pointer dereference in texk/web2c/pdftexdir/writet1.c. NOTE: this is disputed because it should be categorized as a usability problem.

CVE-2023-46048 identifies a NULL pointer dereference vulnerability in the Tex Live distribution, specifically within the pdftexdir component of pdftex, in the file writet1.c. The vulnerability arises when the software attempts to dereference a NULL pointer, leading to a crash of the pdftex process. This type of flaw is categorized under CWE-476 (NULL Pointer Dereference). The vulnerability was published on March 27, 2024, and carries a CVSS v3.1 score of 6.2, indicating medium severity. The vector indicates local attack vector (AV:L), low attack complexity (AC:L), no privileges required (PR:N), no user interaction (UI:N), unchanged scope (S:U), no confidentiality or integrity impact (C:N/I:N), but high impact on availability (A:H). The issue is disputed by some as it may be more of a usability or stability problem rather than a security vulnerability, given that it causes a denial of service rather than enabling unauthorized access or data compromise. No patches or fixes have been released, and no known exploits exist in the wild. The vulnerability affects Tex Live versions around the 944e257 commit, though exact affected versions are not specified. Tex Live is widely used in academic, scientific, and publishing environments for TeX/LaTeX document processing. Exploitation requires local access to run pdftex with crafted input that triggers the NULL pointer dereference, causing the process to crash and resulting in denial of service.

Detailed information about CVE-2023-46048: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2023-46048: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2023-46048: n/a

Threats Tagged 'cve-2023-46048'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2023-46048'

Lead Pen Test Professional