Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues: Update to Mozilla Thunderbird ESR 128.6 MFSA 2025-05, bsc1234991 Security fixes: CVE-2025-0237 bmo1915257 WebChannel APIs susceptible to confused deputy attack CVE-2025-0238 bmo1915535 Use-after-free when breaking lines in text...

SUSE-SU-2025:0080-1 Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues: Update to Mozilla Thunderbird ESR 128.6 MFSA 2025-05, bsc1234991 Security fixes: - CVE-2025-0237 bmo1915257 WebChannel APIs susceptible to confused deputy attack - CVE-2025-0238 bmo1915535 Use-after-free when breaking lines in text -...

CVE-2024-52333

creationtimestamp| type| source ---|---|--- 2025-01-13 14:22:15+00:00| seen| https://infosec.exchange/users/cve/statuses/113821491830819005 2025-01-13 15:15:26+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfmzoz67mw2p 2025-01-13 15:42:45+00:00| seen|...

CVE-2024-47796

creationtimestamp| type| source ---|---|--- 2025-01-13 14:22:14+00:00| seen| https://infosec.exchange/users/cve/statuses/113821491815579060 2025-01-13 15:15:23+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfmzows6tw2h 2025-01-13 15:42:46+00:00| seen|...

CVE-2025-22498

creationtimestamp| type| source ---|---|--- 2025-01-13 14:15:35+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfmwdz7eum2f 2025-01-13 15:42:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lfn37vht3v2b 2025-01-13 16:14:23+00:00| seen|...

CVE-2025-22344

creationtimestamp| type| source ---|---|--- 2025-01-13 14:15:32+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfmwdwgzqz2p 2025-01-13 15:42:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lfn37v5slo2w 2025-01-13 16:14:22+00:00| seen|...

CVE-2025-22337

creationtimestamp| type| source ---|---|--- 2025-01-13 14:15:30+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfmwdturv42f 2025-01-13 16:14:22+00:00| seen| https://t.me/cvedetector/15147...

CVE-2025-22314

creationtimestamp| type| source ---|---|--- 2025-01-13 14:15:27+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfmwdr45u62c 2025-01-13 16:14:27+00:00| seen| https://t.me/cvedetector/15150...

CVE-2024-56301

creationtimestamp| type| source ---|---|--- 2025-01-13 14:15:23+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfmwdo2hzh2n 2025-01-13 16:14:29+00:00| seen| https://t.me/cvedetector/15153...

CVE-2024-56065

creationtimestamp| type| source ---|---|--- 2025-01-13 14:15:21+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfmwdllocf2n 2025-01-13 16:14:29+00:00| seen| https://t.me/cvedetector/15152 2025-01-14 21:05:23+00:00| seen|...

CVE-2025-22514

creationtimestamp| type| source ---|---|--- 2025-01-13 14:12:57+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1361 2025-01-13 14:15:43+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfmweb43ow2c 2025-01-13 15:42:47+00:00| seen|...

CGA-P6VH-HCP7-34WC

Bulletin has no description...

A week in security (January 6 – January 12)

Last week on Malwarebytes Labs: Dental group lied through teeth about data breach, fined $350,000 AI-supported spear phishing fools more than 50% of targets US Cyber Trust Mark logo for smart devices is coming GroupGreeting e-card site attacked in "zqxq" campaign Massive breach at location data...

CVE-2024-12274

creationtimestamp| type| source ---|---|--- 2025-01-13 06:05:08+00:00| seen| https://infosec.exchange/users/cve/statuses/113819537120398503 2025-01-13 06:06:04+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1354 2025-01-13 06:10:25+00:00| seen|...

CVE-2025-0410

creationtimestamp| type| source ---|---|--- 2025-01-13 02:40:26+00:00| seen| https://infosec.exchange/users/cve/statuses/113818732180843425 2025-01-13 03:08:21+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1348 2025-01-13 03:15:52+00:00| seen|...

CVE-2025-0408

creationtimestamp| type| source ---|---|--- 2025-01-13 02:16:01+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lflo5czvpz2p 2025-01-13 02:47:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lflpwg6co32r 2025-01-13 03:41:54+00:00| seen|...

Huawei HarmonyOS Distributed Notification Module Competitive Conditions Vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A competitive condition vulnerability exists in the Huawei HarmonyOS Distributed Notification Module, which can be exploited by an attacker to cause...

CVE-2024-57875

creationtimestamp| type| source ---|---|--- 2025-01-11 15:04:37+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1320 2025-01-11 15:15:40+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfhyrmjx4z22 2025-01-11 15:39:28+00:00| seen|...

CVE-2024-56372

creationtimestamp| type| source ---|---|--- 2025-01-11 13:17:23+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfhs63ifyk2m 2025-01-11 14:55:24+00:00| seen| https://t.me/cvedetector/15071...

CVE-2024-47408

creationtimestamp| type| source ---|---|--- 2025-01-11 13:06:50+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1314 2025-01-11 13:15:58+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfhs3kejje2i...