Stable Channel Update for Desktop

The Stable channel has been updated to 135.0.7049.84/.85 for Windows, Mac and 135.0.7049.84 for Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log. Security Fixes and Rewards Note: Access to bug details and links may be kept restrict...

autotrainingcentre.com Cross Site Scripting vulnerability OBB-4042550

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PYSEC-2025-117

Buffer Overflow vulnerability in gdal 3.10.2 allows a local attacker to cause a denial of service via the OGRSpatialReference::Release function. NOTE: the Supplier indicates that the report is invalid and could not be reproduced...

PYSEC-2025-117

Buffer Overflow vulnerability in gdal 3.10.2 allows a local attacker to cause a denial of service via the OGRSpatialReference::Release function. NOTE: the Supplier indicates that the report is invalid and could not be reproduced...

CVE-2025-3373

creationtimestamp| type| source ---|---|--- 2025-04-07 17:12:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmahf6dqlg2c 2025-04-07 18:44:37+00:00| seen| https://t.me/cvedetector/22315...

Year in Review: In conversation with the report's authors

🎥 Talos Year in Review 2024: Part 1 & 2 - Watch Now! Another year, another mountain of malicious telemetry to sift through. I spoke with a few of Talos' Year in Review authors, freshly out of the sandbox, to discuss the how's and why's of our biggest findings. 👉 Part 1: The major theme of 2024, t...

CVE-2025-21430

creationtimestamp| type| source ---|---|--- 2025-04-07 13:36:09+00:00| seen| Telegram/v6iTII479FILur3QF7npgpnMwpcX7v13wP5w0vhYmM-0PcY 2025-04-07 13:36:10+00:00| seen| Telegram/0p4vbTMy94yiflvQc9t3VgScx-t9fr9DqYGUuzHMz3W1NIo 2025-04-07 15:07:08+00:00| seen|...

CVE-2025-21434

creationtimestamp| type| source ---|---|--- 2025-04-07 13:36:09+00:00| seen| Telegram/v6iTII479FILur3QF7npgpnMwpcX7v13wP5w0vhYmM-0PcY 2025-04-07 15:07:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmaafisthr26 2025-04-07 15:23:45+00:00| seen| https://t.me/cvedetector/22296...

CVE-2025-21443

creationtimestamp| type| source ---|---|--- 2025-04-07 13:36:06+00:00| seen| Telegram/xWd3aJgkYYElk-g7m1QlDLR4EuR7sDHiszgq2ISUrjEYOkY 2025-04-07 15:07:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmaafjkoag2z 2025-04-07 15:23:29+00:00| seen| https://t.me/cvedetector/22283...

CVE-2025-21440

creationtimestamp| type| source ---|---|--- 2025-04-07 11:08:07+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114296362577403487 2025-04-07 13:36:07+00:00| seen| Telegram/PxgItuH1qTSdpVIqjljQp70ezMBrxj3Wpd4MMoc5smzp-38 2025-04-07 15:07:16+00:00| seen|...

CVE-2025-3348

creationtimestamp| type| source ---|---|--- 2025-04-07 10:45:20+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10693 2025-04-07 15:07:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmaafjhd6w2c 2025-04-07 15:23:30+00:00| seen|...

tulipindia.in Cross Site Scripting vulnerability OBB-4042516

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

moziru.com Cross Site Scripting vulnerability OBB-4042489

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

samehadaku.net Cross Site Scripting vulnerability OBB-4042488

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2025-3340

creationtimestamp| type| source ---|---|--- 2025-04-07 06:45:24+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10677 2025-04-07 09:31:09+00:00| published-proof-of-concept| Telegram/ZqVcp9kxvRu5E7Cj8nsMX7B3XhX8B8CAXf42e1JkncWKY5I 2025-04-07 11:07:55+00:00| seen|...

CVE-2025-31170

creationtimestamp| type| source ---|---|--- 2025-04-07 05:48:53+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114295107298124120 2025-04-07 06:32:02+00:00| published-proof-of-concept| Telegram/EsnBsJ3Ssj-UYUC8Y7f1dDSxyldCCaK6EjJlv4mvyH2MMw 2025-04-07 07:17:51+00:00| seen|...

CVE-2024-58126

creationtimestamp| type| source ---|---|--- 2025-04-07 05:48:52+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114295107215178244...

CVE-2025-3332

creationtimestamp| type| source ---|---|--- 2025-04-07 05:31:03+00:00| seen| Telegram/G5j2DpdM3df1rm80T-3UPuUhsnYqXNmnD5uSVgYioPln0DA 2025-04-07 07:01:18+00:00| seen| https://t.me/cvedetector/22240 2025-04-07 19:48:42+00:00| seen|...

CVE-2025-20658

creationtimestamp| type| source ---|---|--- 2025-04-07 03:44:56+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10672 2025-04-07 07:17:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lm7g63673d2c 2025-04-07 08:42:13+00:00| seen| https://t.me/cvedetector/22269...

CVE-2025-3331

creationtimestamp| type| source ---|---|--- 2025-04-07 02:45:41+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10653 2025-04-07 05:31:03+00:00| seen| Telegram/G5j2DpdM3df1rm80T-3UPuUhsnYqXNmnD5uSVgYioPln0DA 2025-04-07 07:01:24+00:00| seen| https://t.me/cvedetector/22244...