CVE-2025-11710

A compromised web process using malicious IPC messages could have caused the privileged browser process to reveal blocks of its memory to the compromised process. This vulnerability was fixed in Firefox 144, Firefox ESR 115.29, Firefox ESR 140.4, Thunderbird 144, and Thunderbird 140.4...

PT-2025-41901

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 144 Firefox ESR versions prior to 140.4 Thunderbird versions prior to 144 Thunderbird versions prior to 140.4 Description A flaw exists in the “Copy as cURL” feature due to insufficient escaping. This could allow an...

PT-2025-41896

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 144 Firefox ESR versions prior to 140.4 Thunderbird versions prior to 144 Thunderbird versions prior to 140.4 Description A use-after-free issue exists in the MediaTrackGraphImpl::GetInstance function. This can occur...

PT-2025-41902

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 144 Firefox ESR versions 115.28 through 140.3 Thunderbird versions prior to 144 Thunderbird ESR versions 140.3 Description The software contains memory safety bugs. Some of these bugs exhibited evidence of memory...

PT-2025-41897

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 144 Firefox ESR versions prior to 115.29 Firefox ESR versions prior to 140.4 Thunderbird versions prior to 144 Thunderbird versions prior to 140.4 Description A compromised web process could trigger out-of-bounds read...

PT-2025-41904

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 144 Thunderbird versions prior to 144 Description A flaw exists where links within a sandboxed iframe can trigger the opening of an external application on Android devices, bypassing the necessary "allow-" permissions...

PT-2025-41909

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 144 Thunderbird versions prior to 144 Description A memory safety issue exists in Firefox and Thunderbird. Evidence suggests the bug could lead to memory corruption, potentially allowing for arbitrary code execution...

PT-2025-41907

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 144 Thunderbird versions prior to 144 Description A flaw exists in Firefox and Thunderbird where the use of the native messaging API by web extensions on Windows may result in crashes due to use-after-free memory...

PT-2025-41905

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 144 Description When switching between Android apps using the card carousel, Firefox displays a black screen as its card image if a password-related screen was the last one used. Prior to version 144, the password edi...

PT-2025-41906

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 144 Description A malicious webpage could create a fake address bar to deceive users when the address bar was hidden due to scrolling on Android devices. This occurred in response to a visibilitychange event...

Mozilla Thunderbird < 144.0

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 144.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-84 advisory. - Memory safety bug present in Firefox 143 and Thunderbird 143. This bug showed evidence of memory...

Rockwell Automation Logix Controllers Uncontrolled Resource Consumption (CVE-2022-1797)

The remote OT product is vulnerable as specified in advisory ICSA-22-144-01. - A malformed Class 3 common industrial protocol message with a cached connection can cause a denial-of- service condition in Rockwell Automation Logix Controllers, resulting in a major nonrecoverable fault. If the targe...

OWASP Top-10 2021, statistically calculated proposal.

Everybody knows the OWASP Top-10 as well as the fact that it gets updated only every other 3–4 years. With the last update published in 2017, it’s no surprise that a new version is coming this year. During my application security career, I saw OWASP Top-10 at least in 2003, 2004, 2007, 2010, 2013...

tw.thehomeworkerjob.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-975428 Security Researcher kzalloc Helped patch 144 vulnerabilities Received 2 Coordinated Disclosure badges , a holder of 2 badges for responsible and coordinated disclosure, found a security vulnerability affecting tw.thehomeworkerjob.com website and its users. Following...

sk.thetransportjob.com Cross Site Scripting vulnerability

Security Researcher kzalloc Helped patch 144 vulnerabilities Received 2 Coordinated Disclosure badges , a holder of 2 badges for responsible and coordinated disclosure, found a security vulnerability affecting sk.thetransportjob.com website and its users. Following coordinated and responsible...

Siemens S7-1200 Series PLC CPU Web Server Network Request Saturation Remote DoS

Binary data 144.prm...

Microsoft Edge - Internationalization Initialization Type Confusion (MS16-144) Exploit

Exploit for windows platform in category dos / poc 1; , set: function ; function f var i = Intl; Intl = ; // this somehow prevents an exception that prevents laoding di, "Collator", noobj;...

December 2016 Security Monthly Quality Rollup for Windows Server 2012

December 2016 Security Monthly Quality Rollup for Windows Server 2012 Summary This security update resolves the following vulnerabilities in Windows Server 2012: MS16-153 Security update for common log file system driver MS16-151 Security update for Windows kernel-mode drivers MS16-149 Security...

December 2016 Security Monthly Quality Rollup for Windows 7 SP1 and Windows Server 2008 R2 SP1

December 2016 Security Monthly Quality Rollup for Windows 7 SP1 and Windows Server 2008 R2 SP1 Summary This security update resolves the following vulnerabilities in Windows: MS16-153 Security update for common log file system driver MS16-151 Security update for Windows kernel-mode drivers MS16-1...

Microsoft Internet Explorer Memory Corruption (MS16-144: CVE-2016-7279)

A remote code execution vulnerability exists in Internet Explorer and Microsoft Edge. The vulnerability is due to the way scripting engine renders when handling objects in memory. A remote attacker can exploit this issue by enticing a user to open a specially crafted web-page with an affected...