RLSA-2025:21881 Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: Mitigation bypass in the DOM: Security component CVE-2025-13018 firefox: Use-after-free in the Audio/Video component CVE-2025-13014 firefox: Incorrect boundary conditions in the JavaScript: WebAssembly compone...

Malicious code in @ra-ide/udt-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43e7622a4fb5f78043c8f52ad78fb036d26fa8ae041f8d2d21f82d4620894e14 The package @ra-ide/udt-frontend was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-190593 Malicious code in @ra-ide/logix-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d0e9dbec30cd8b41d8e4b83527959c2b2e24abd51fcdd958e18ead57f3b4bf0 The package @ra-ide/logix-frontend was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-190595 Malicious code in @ra-ide/st-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49ae7d07061ce406d972052f23649e631bb22f724cd85c8ab0c73b18689ecb36 The package @ra-ide/st-frontend was found to contain malicious code. Source: ossf-package-analysis...

firefox: thunderbird: Use-after-free in the WebRTC: Audio/Video component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the WebRTC: Audio/Video component...

Malicious code in siitoogether (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 6fccd687f1acb55e6da0782b08ef14b3e8be5587dee4743a163a106c48390a50 Importing the module starts an RAT-like process capable of execute remote commands, with the C2 through Discord --- Category: MALICIOUS - The campaign has...

MAL-2025-190587 Malicious code in alicenpmpocpackage (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 158edf3777a6df259583332b3694508454333d6643c7eb04eea85176ba9df724 The package alicenpmpocpackage was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in identity-authn-core-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db734e79e178dd70b53bb814581620da1604a06da4967555160d7dfd0d14e0c5 The package identity-authn-core-ui was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-190584 Malicious code in @kiwiiw/ez-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f5c041881bf0c4fa9609a55549447c4edf120f50bd70b30b8f71a9d9814f371 The package @kiwiiw/ez-lib was found to contain malicious code. Source: ghsa-malware 93b9fad273c843b3194e657cf9d54441b5beecba505b2c72db555efe226ca2a6...

CVE-2025-0643: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Narkom Communication and Software Technologies Trade Ltd. Co. Pyxis Signage allows Stored XSS. This issue affects Pyxis Signage: through 31012025...

Multi-Domain Security for 6G ISAC: Challenges and Opportunities in Transportation

Integrated sensing and communication ISAC will be central to 6G-enabled transportation, providing both seamless connectivity and high-precision sensing. However, this tight integration exposes attack points not encountered in pure sensing and communication systems. In this article, we identify...

MAL-2025-190579 Malicious code in hellospa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0582933888e4badd81ead15c78b68f8de23a0c728b5a1584f737bedcfd569184 The package hellospa was found to contain malicious code. Source: ghsa-malware f4e9282a1da51cf6409a4e5196d718d73e8f6f8dbddd339cbdd0535658517576 Any...

MAL-2025-190569 Malicious code in node-calculator-b0e4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 751e25d2464b2da9bfb7e629441757f1d413f8e1cf4a38522f2316ef84755e59 The package node-calculator-b0e4 was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in node-calculator-b0e4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 751e25d2464b2da9bfb7e629441757f1d413f8e1cf4a38522f2316ef84755e59 The package node-calculator-b0e4 was found to contain malicious code. Source: ossf-package-analysis...

MGASA-2025-0305 Updated thunderbird packages fix security vulnerabilities

Race condition in the Graphics component. CVE-2025-13012 Mitigation bypass in the DOM: Core & HTML component. CVE-2025-13013 CVE-2025-13014: Use-after-free in the Audio/Video component. CVE-2025-13014 Spoofing issue in Firefox. CVE-2025-13015 Incorrect boundary conditions in the JavaScript:...

Trustworthy GenAI over 6G: Integrated Applications and Security Frameworks

The integration of generative artificial intelligence GenAI into 6G networks promises substantial performance gains while simultaneously exposing novel security vulnerabilities rooted in multimodal data processing and autonomous reasoning. This article presents a unified perspective on cross-doma...

Mozilla Thunderbird < 52.7

The version of Thunderbird installed on the remote Windows host is prior to 52.7. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2018-09 advisory. - Mozilla developers Jet Villegas and Randell Jesup reported memory safety bugs present in Firefox ESR 52.6 and...

Mozilla Firefox < 58.0

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 58.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2018-02 advisory. - Mozilla developers and community members Calixte Denizet, Christian Holler, Alex Gaynor, Yoshi Huang, Bob...

Malicious code in node-calculator-8ddb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93cecdcd0f2d763dafb0dadb9723d844fe53a10c842578f1ffb0c768d86f9da5 The package node-calculator-8ddb was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in node-calculator-fc9a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fce72f3b9dbb5fb52c5ed5de8bb398997497c2d706ce237f5062960eb66341fc The package node-calculator-fc9a was found to contain malicious code. Source: ossf-package-analysis...