Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Malware

Reddit Reverse Engineering

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

markdownify-mcp

A Server-Side Request Forgery (SSRF) vulnerability was discovered in the webpage-to-markdown conversion feature of markdownify-mcp v0.0.2 and before. This vulnerability allows an attacker to bypass private IP restrictions through hostname-based bypass and HTTP redirect chains, enabling access to internal network services.

CVE-2025-65512 identifies a Server-Side Request Forgery (SSRF) vulnerability in the markdownify-mcp library, specifically in its webpage-to-markdown conversion functionality. SSRF vulnerabilities occur when an attacker can manipulate a server to make HTTP requests to arbitrary locations, often internal network resources that are otherwise inaccessible externally. In this case, markdownify-mcp versions 0.0.2 and earlier fail to properly enforce private IP restrictions. The vulnerability exploits hostname-based bypass techniques and HTTP redirect chains to circumvent these restrictions, allowing an attacker to reach internal services that should be protected by network segmentation or firewall rules. The vulnerability requires no authentication or user interaction, increasing its risk profile. The CVSS 3.1 base score of 7.5 reflects a high severity due to the potential confidentiality impact, as attackers can access sensitive internal endpoints. However, the vulnerability does not affect data integrity or availability. No patches have been published yet, and no active exploitation has been reported. The weakness is categorized under CWE-918, which covers SSRF issues. This vulnerability is particularly dangerous in environments where markdownify-mcp is used to process external URLs or user-supplied content, as it can be leveraged to perform internal reconnaissance or access sensitive services such as metadata APIs, internal admin panels, or databases. The lack of authentication and user interaction requirements means automated exploitation is feasible. Organizations relying on this library should urgently assess their exposure and implement mitigations to prevent SSRF attacks.

Detailed information about CVE-2025-65512: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2025-65512: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-65512: n/a

Threats Tagged 'cve-2025-65512'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-65512'

Lead Pen Test Professional