Malicious code in test-mlw2-haulm-mercy-focus-named (npm)

The package test-mlw2-haulm-mercy-focus-named was found to contain malicious code...

MAL-2025-31789 Malicious code in react-focus-lock-next (npm)

The package react-focus-lock-next was found to contain malicious code...

MAL-2025-35496 Malicious code in test-mlw2-haulm-mercy-focus-named (npm)

The package test-mlw2-haulm-mercy-focus-named was found to contain malicious code...

Malicious code in test-mlw2-tidal-focus (npm)

The package test-mlw2-tidal-focus was found to contain malicious code...

MAL-2025-36452 Malicious code in test-mlw2-tidal-focus (npm)

The package test-mlw2-tidal-focus was found to contain malicious code...

MAL-2025-20733 Malicious code in focus-sherlock (npm)

The package focus-sherlock was found to contain malicious code...

Malicious code in react-focus-lock-next (npm)

The package react-focus-lock-next was found to contain malicious code...

Fortinet SSL VPNs Hit by Global Brute-Force Wave Before Attackers Shift to FortiManager

Cybersecurity researchers are warning of a "significant spike" in brute-force traffic aimed at Fortinet SSL VPN devices. The coordinated activity, per threat intelligence firm GreyNoise, was observed on August 3, 2025, with over 780 unique IP addresses participating in the effort. As many as 56...

Linux Distros Unpatched Vulnerability : CVE-2023-29547

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When a secure cookie existed in the Firefox cookie jar an insecure cookie for the same domain could have been created, when it should have silently failed. This...

Linux Distros Unpatched Vulnerability : CVE-2023-29537

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple race conditions in the font initialization could have led to memory corruption and execution of attacker-controlled code. This vulnerability affects...

MINI-PMJM-CM9M-X9X8

Bulletin has no description...

Linux Distros Unpatched Vulnerability : CVE-2023-29551

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory safety bugs present in Firefox 111. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could ha...

Linux Distros Unpatched Vulnerability : CVE-2023-29544

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - If multiple instances of resource exhaustion occurred at the incorrect time, the garbage collector could have caused memory corruption and a potentially...

Linux Distros Unpatched Vulnerability : CVE-2023-29549

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Under certain circumstances, a call to the bind function may have resulted in the incorrect realm. This may have created a vulnerability relating to...

Linux Distros Unpatched Vulnerability : CVE-2023-29548

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A wrong lowering instruction in the ARM64 Ion compiler resulted in a wrong optimization result. This vulnerability affects Firefox 112, Focus for Android 112,...

xorg-x11-server: Heap buffer overflow in DeviceFocusEvent and ProcXIQueryPointer

A flaw was found in X.Org server. Both DeviceFocusEvent and the XIQueryPointer reply contain a bit for each logical button currently down. Buttons can be arbitrarily mapped to any value up to 255, but the X.Org Server was only allocating space for the device's particular number of buttons, leadin...

CVE-2025-8043

Focus incorrectly truncated URLs towards the beginning instead of around the origin. This vulnerability affects Firefox 141 and Thunderbird 141...

CVE-2025-8043

Focus incorrectly truncated URLs towards the beginning instead of around the origin. This vulnerability was fixed in Firefox 141...

Phantom Subgroup Poisoning: Stealth Attacks on Federated Recommender Systems

Federated recommender systems FedRec have emerged as a promising solution for delivering personalized recommendations while safeguarding user privacy. However, recent studies have demonstrated their vulnerability to poisoning attacks. Existing attacks typically target the entire user group, which...

GNUnet P2P Framework 0.24.3

GNUnet is a peer-to-peer framework with focus on providing security. All peer-to-peer messages in the network are confidential and authenticated. The framework provides a transport abstraction layer and can currently encapsulate the network traffic in UDP IPv4 and IPv6, TCP IPv4 and IPv6, HTTP, o...