firefox: Site isolation issue in the Networking: Cookies component

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Site isolation issue in the Networking: Cookies component...

firefox: thunderbird: Privilege escalation in the Networking: Cookies component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the Networking: Cookies component...

firefox: thunderbird: Same-origin policy bypass in the Networking: Cookies component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Same-origin policy bypass in the Networking: Cookies component...

firefox: Site isolation issue in the Networking: Cookies component

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Site isolation issue in the Networking: Cookies component...

SCRAPPER

🕷️ سكربّر من BertUI مراقب الجلسة لأتمتة الويب سكربّر ليس أداة كشط — إنه مراقب جلسة يلتقط بيانات متصفحك الحقيقية لاستخدامها في أي أداة أتمتة. مبني على إطار عمل BertUI React GitHub: BunElysiaReact/SCRAPY لا نطاق. لا سحابة. كل شيء محلي. كل شيء لك. 📋 جدول المحتويات المشكلة التي يحلها سكربّر ما هو...

MAL-2026-15937 Malicious code in minecraftmodes (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2057275d7d6bc39e22d9147702d20b43fcabcab4e438821e823010937448eb6c The package exfiltrates Roblox cookies from the victim machine. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaig...

Malicious code in minecraftmodes (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2057275d7d6bc39e22d9147702d20b43fcabcab4e438821e823010937448eb6c The package exfiltrates Roblox cookies from the victim machine. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaig...

CVE-2026-83627

The Hummingbird – Speed Optimization, Caching, Minify, Compress & CDN plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 3.21.0 via the logmsg function in core/modules/class-page-cache.php. The page-cache debug log is written to...

CVE-2022-35497

In Trimble TM4WEB 21.4.0.4 due to security misconfiguration with session identifiers, it is possible to recover valid session cookies via reflected cross-site scripting affecting the external document viewer endpoint...

CVE-2022-35497

In Trimble TM4WEB 21.4.0.4 due to security misconfiguration with session identifiers, it is possible to recover valid session cookies via reflected cross-site scripting affecting the external document viewer endpoint...

CVE-2026-80890: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: sctp: reject stale cookies with mismatched verification tags sctpunpackcookie skips cookie expiration checks whenever an association already exists. This is broader than the exception in RFC 9260 Section 5.2.4. For an existing...

CVE-2022-35497

The Trimble TM4WEB software (version

CVE-2026-85181: Reliance on Cookies without Validation and Integrity Checking

CAT uses Java String.hashCode as the sole integrity check for session cookies without server-side keying, allowing attackers to forge valid checksums offline. Attackers can set the x-forwarded-for header to bypass IP binding validation and create admin sessions with full configuration access...

Infostealers are hijacking Claude accounts at users’ expense

Anthropic has warned some Claude users that criminals are using information stealers to take over their accounts. Rather than guessing passwords or intercepting two-factor authentication 2FA codes, the attackers steal the browser sessions that prove a user is already logged in. According to a...

Chromium: CVE-2026-79260 Improper input validation in Cookies

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

MAL-2026-14554 Malicious code in decoris (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 1ce74b34855100b6ba312f767a982fb288a802da613fec375aec92665f4d9973 The package exfiltrates Roblox cookies from the victim machine. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaig...

Malicious code in decoris (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 1ce74b34855100b6ba312f767a982fb288a802da613fec375aec92665f4d9973 The package exfiltrates Roblox cookies from the victim machine. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaig...

UBUNTU-CVE-2026-47889

A WebFlux application running on the Jetty 12 Core reactive adapter serializes response cookies without the sameSite attribute. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19...

EUVD-2026-66857

A WebFlux application running on the Jetty 12 Core reactive adapter serializes response cookies without the sameSite attribute. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19...

CVE-2026-47889

A WebFlux application running on the Jetty 12 Core reactive adapter serializes response cookies without the sameSite attribute. Spring Framework 7.0.0 - 7.0.8 Spring Framework 6.2.0 - 6.2.19...