Amazon Linux 2023 : bpftool, kernel6.12, kernel6.12-modules-extra (ALAS2023-2025-994)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-994 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: do proper folio cleanup when cowfilerange failed CVE-2024-57976 In the Linux kernel, the following vulnerability has...

Mageia: Security Advisory (MGASA-2025-0181)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CISA Warns of Remote Control Flaws in SinoTrack GPS Trackers

The US CISA reports critical vulnerabilities in SinoTrack GPS devices that could let attackers remotely control vehicles and track locations. Discover the vulnerabilities and essential steps to secure your device...

CVE-2024-4067

creationtimestamp| type| source ---|---|--- 2025-06-11 15:29:00+00:00| seen| https://gist.github.com/EduardoCorpay/fdaeb4ec65cc4a1c8fcd2fb0162de09c...

CVE-2025-4228

creationtimestamp| type| source ---|---|--- 2025-06-11 14:00:00+00:00| seen| https://security.paloaltonetworks.com/CVE-2025-4228 2025-06-11 19:03:29+00:00| seen| https://bsky.app/profile/ripjyr.bsky.social/post/3lre3vy4uo62g 2025-06-13 00:35:17+00:00| seen|...

CVE-2025-5985

creationtimestamp| type| source ---|---|--- 2025-06-11 01:55:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrcchumwne2s...

thunderbird: Tracking Links in Attachments Bypassed Remote Content Blocking

The Mozilla Foundation's Security Advisory describes the following issue: It is possible to craft an email that shows a tracking link as an attachment. If the user attempts to open the attachment, Thunderbird automatically accesses the link. The configuration to block remote content does not...

thunderbird: Tracking Links in Attachments Bypassed Remote Content Blocking

The Mozilla Foundation's Security Advisory describes the following issue: It is possible to craft an email that shows a tracking link as an attachment. If the user attempts to open the attachment, Thunderbird automatically accesses the link. The configuration to block remote content does not...

SinoTrack GPS Receiver

RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to access device profiles for which they are not authorized through the common web management interface. Access to the device profile may allow an attacker to perform some remote functions on connected...

Important: kernel6.12

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: btrfs: do proper folio cleanup when cowfilerange failed CVE-2024-57976 In the Linux kernel, the following vulnerability has been resolved: kernel: be more careful about dupmmap failures and uprobe registering...

ALSA-2025:8756 Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: thunderbird: JavaScript Execution via Spoofed PDF Attachment and file:/// Link CVE-2025-3909 thunderbird: Sender Spoofing via Malformed From Header in Thunderbird CVE-2025-3875 thunderbird: Unsolicited File Download,...

Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: thunderbird: JavaScript Execution via Spoofed PDF Attachment and file:/// Link CVE-2025-3909 thunderbird: Sender Spoofing via Malformed From Header in Thunderbird CVE-2025-3875 thunderbird: Unsolicited File Download,...

CVE-2025-27818

creationtimestamp| type| source ---|---|--- 2025-06-09 13:04:22+00:00| seen| https://seclists.org/oss-sec/2025/q2/236 2025-06-09 15:24:48+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lr6oqv6nhm2m 2025-06-10 08:32:38+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17840...

New Way to Covertly Track Android Users

Researchers have discovered a new way to covertly track Android users. Both Meta and Yandex were using it, but have suddenly stopped now that they have been caught. The details are interesting, and worth reading in detail: Tracking code that Meta and Russia-based Yandex embed into millions of...

CVE-2025-5710

creationtimestamp| type| source ---|---|--- 2025-06-06 02:30:48+00:00| published-proof-of-concept| Telegram/4q60nwpdjXRbesVJTGfPfPMfHJR0gUJAChumjZiNahiH7yk 2025-06-06 05:24:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqw3t6zuyc2p...

thunderbird: Tracking Links in Attachments Bypassed Remote Content Blocking

The Mozilla Foundation's Security Advisory describes the following issue: It is possible to craft an email that shows a tracking link as an attachment. If the user attempts to open the attachment, Thunderbird automatically accesses the link. The configuration to block remote content does not...

thunderbird: Tracking Links in Attachments Bypassed Remote Content Blocking

The Mozilla Foundation's Security Advisory describes the following issue: It is possible to craft an email that shows a tracking link as an attachment. If the user attempts to open the attachment, Thunderbird automatically accesses the link. The configuration to block remote content does not...

SUSE: Security Advisory (SUSE-SU-2024:3444-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2024:3165-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-5503

creationtimestamp| type| source ---|---|--- 2025-06-03 15:45:24+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqpn2m26qly2 2025-06-03 17:13:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqprzdvnzz2q...