firefox: thunderbird: Site isolation issue in the WebExtensions component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Site isolation issue in the WebExtensions component...

Malicious code in multyproccess (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7938a109a642dfe8b161e9568d6373a038c3413c0fd1f2b01702f4f173348553 The package's setup.py overrides the install and develop cmdclass to base64-decode a bundled request/.payload file and launch it via...

EUVD-2026-64744

The web GUI of affected Murrelektronik Xelity switches logs MAC addresses from the devices MAC address table when an authenticated administrator uses the 'Copy learned MAC Addresses' function. Due to improper generation of error messages, an unauthenticated attacker with network access to the web...

Malicious Package

Overview statist-browser-typed-client-sme.platform.web.productsnavigation.events is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no...

Malicious Package

Overview statist-browser-typed-client-mb.product.analytics is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that...

Malicious Package

Overview tinkoff-statist-browser-typed-client-test.softwarecenter.metrics is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection...

Malicious Package

Overview tinkoff-statist-browser-typed-client-leasing.admin.events is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection betwee...

Malicious Package

Overview tinkoff-statist-browser-typed-client-dwh.chimera.base is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between th...

Malicious Package

Overview tinkoff-statist-browser-typed-client-dss.insurance.service is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection betwe...

Malicious Package

Overview tinkoff-statist-browser-typed-client-eventea.projects.smartcam is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection...

Malicious Package

Overview tinkoff-statist-browser-typed-client-investing.product.pulse is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection...

Malicious Package

Overview tinkoff-statist-browser-typed-client-sme.rko.ta.ios.events is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection betwe...

Malicious Package

Overview tinkoff-statist-browser-typed-client-mb.reliability.android.events is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connecti...

Firefox Privilege Management DoS

The vulnerability in the Firefox web browser is related to insecure management of privileges. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

MAL-2026-14389 Malicious code in envprovision (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a414ad5404fdeeb23c37f1580aeee8175765ba8613e8fadd1a0254bf0e25d2f6 envprovision 1.4.0 presents itself as an environment-diagnostics helper but its public check/sync API, on Windows, fetches a JSON manifest from a...

Malicious code in envprovision (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a414ad5404fdeeb23c37f1580aeee8175765ba8613e8fadd1a0254bf0e25d2f6 envprovision 1.4.0 presents itself as an environment-diagnostics helper but its public check/sync API, on Windows, fetches a JSON manifest from a...

Exploit for CVE-2026-74252

Stored XSS in J2Commerce Guest Checkout via Cookie Filter Bypa...

[SECURITY] Fedora 44 Update: chromium-151.0.7922.169-1.fc44

Chromium is an open-source web browser, powered by WebKit Blink...

PT-2026-81043

Name of the Vulnerable Software and Affected Versions Epiphany affected versions not specified Description A flaw exists in the form autofill script where the browser fails to escape an HTML form element ID before interpolating it into a CSS selector. A malicious website can provide a crafted ID...

Linux Distros Unpatched Vulnerability : CVE-2026-77682

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - JavaScript code injection in autofill via unsanitized CSS selector from element id fedora-all CVE-2026-77682 Note that Nessus relies on the presence of the...