Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit NetSec

Reddit Cybersecurity

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

This security update for ClamAV addresses multiple vulnerabilities including improper boundary checks, invalid memory frees, integer overflows and underflows, out-of-bounds reads/writes, path traversal, and thread-safety issues. These flaws affect various parsers such as ZIP, PESpin, GPT partition names, PDF hex strings, Mach-O files, XAR, and OneNote notebooks. The update also fixes issues related to NTFS alternate data stream handling on Windows and improves thread safety and resource management in the daemon and cryptographic components.

The ClamAV update fixes several security vulnerabilities: CVE-2026-20337 addresses improper boundary checks in the ZIP archive parser; CVE-2026-20338 fixes invalid free due to ownership mishandling in ZIP catalogue merging; CVE-2026-20339 resolves an integer overflow in the PESpin unpacker causing heap out-of-bounds writes; CVE-2026-20345 corrects out-of-bounds read/write errors in GPT partition name conversion; CVE-2026-20346 patches an integer underflow in PDF hex string parsing causing crashes; CVE-2026-20347 fixes integer overflow and undefined behavior in Mach-O file scanning causing crashes; CVE-2026-20348 addresses improper size handling in the XAR parser allowing excessive allocation and scan-limit bypass; CVE-2026-46671 mitigates a path traversal vulnerability in the OneNote parser allowing file reads outside the notebook directory; CVE-2025-8088 prevents extraction outside the temporary scan directory on Windows by rejecting path separators in NTFS alternate data stream names. Additional fixes include thread-safety improvements in the clamd STATS command, restoration of safe quarantine operations on FreeBSD, an OpenSSL library-context leak fix in legacy hashing helpers, and an upgrade of the Rust crossbeam-epoch dependency to resolve a separate advisory.

Detailed information about Security update for clamav affecting SUSE Product Security Team SUSE. Get real-time updates, technical details, and mitigation strate

Security update for clamav - Live Threat Intelligence - Threat Radar | OffSeq.com

SUSE ratings

URL of this CSAF notice

SUSE Bug 1271922

SUSE Bug 1274597

SUSE Bug 1274598

SUSE Bug 1274599

SUSE Bug 1274600

SUSE Bug 1274601

SUSE Bug 1274602

SUSE Bug 1274603

SUSE CVE CVE-2025-8088 page

SUSE CVE CVE-2026-20337 page

SUSE CVE CVE-2026-20338 page

SUSE CVE CVE-2026-20339 page

SUSE CVE CVE-2026-20345 page

SUSE CVE CVE-2026-20346 page

SUSE CVE CVE-2026-20347 page

SUSE CVE CVE-2026-20348 page

SUSE CVE CVE-2026-46671 page

Security update for clamav

A path traversal vulnerability affecting the Windows version of WinRAR allows the attackers to execute arbitrary code by crafting malicious archive files. This vulnerability was exploited in the wild and was discovered by Anton Cherepanov, Peter Košinár, and Peter Strýček
     from ESET.

This vulnerability (CVE-2025-8088) involves a path traversal flaw (CWE-35) in WinRAR for Windows, enabling attackers to execute arbitrary code through specially crafted archive files. The issue was identified and disclosed by Anton Cherepanov, Peter Košinár, and Peter Strýček from ESET. The CVSS 4.0 base score is 8.4, indicating high severity, with attack vector local, low attack complexity, no privileges required, and user interaction needed. The vulnerability has been exploited in the wild, but no patch or official remediation details are currently available.

Detailed information about CVE-2025-8088: CWE-35 Path traversal in win.rar GmbH WinRAR affecting win.rar GmbH WinRAR. Get real-time updates, technical details, 

CVE-2025-8088: CWE-35 Path traversal in win.rar GmbH WinRAR - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-8088: CWE-35 Path traversal in win.rar GmbH WinRAR


Security update for clamavCVE-2025-8088 0 This security update for ClamAV addresses multiple vulnerabilities including improper boundary checks, invalid memory frees, integer overflows and underflows, out-of-bounds reads/writes, path traversal, and thread-safety issues. These flaws affect various parsers such as ZIP, PESpin, GPT partition names, PDF hex strings, Mach-O files, XAR, and OneNote notebooks. The update also fixes issues related to NTFS alternate data stream handling on Windows and improves thread safety and resource management in the daemon and cryptographic components. HighVulnerability#gcve #csaf #cve-2025-8088 Join the discussion	GCVE Database	09/11/2026, 12:01:10 UTC Added: 09/17/2026, 01:58:49 UTC
CVE-2025-8088: CWE-35 Path traversal in win.rar GmbH WinRARCVE-2025-8088 0 A path traversal vulnerability affecting the Windows version of WinRAR allows the attackers to execute arbitrary code by crafting malicious archive files. This vulnerability was exploited in the wild and was discovered by Anton Cherepanov, Peter Košinár, and Peter Strýček from ESET. HighVulnerabilityBritish Indian Ocean TerritoryIndiaIndonesia+4#cve #cve-2025-8088 #cwe-35 Join the discussion	CVE Database V5	08/24/2026, 00:00:00 UTC Added: 08/08/2025, 11:32:48 UTC

Threats Tagged 'cve-2025-8088'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-8088'

Lead Pen Test Professional