Mozilla Thunderbird < 138.0.1

The version of Thunderbird installed on the remote Windows host is prior to 138.0.1. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-35 advisory. - It was possible to craft an email that showed a tracking link as an attachment. If the user attempted to open th...

Mozilla Thunderbird 安全漏洞

Mozilla Thunderbird is a suite of e-mail client software from the Mozilla Foundation in the United States that is separate from the Mozilla Application Suite. The software supports the IMAP and POP mail protocols as well as the HTML mail format. A security vulnerability exists in Mozilla...

CVE-2025-3932: Authentication Bypass Using an Alternate Path or Channel

It was possible to craft an email that showed a tracking link as an attachment. If the user attempted to open the attachment, Thunderbird automatically accessed the link. The configuration to block remote content did not prevent that. Thunderbird has been fixed to no longer allow access to web...

Mozilla Thunderbird < 128.10.1

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 128.10.1. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-34 advisory. - It was possible to craft an email that showed a tracking link as an attachment. If the user attempted...

CVE-2025-45858

creationtimestamp| type| source ---|---|--- 2025-05-13 16:48:04+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lp2wsukc5s24 2025-05-13 19:43:49+00:00| seen| https://t.me/cvedetector/25207...

CVE-2025-30397

creationtimestamp| type| source ---|---|--- 2025-05-13 16:27:02+00:00| seen| https://www.thezdi.com/blog/2025/5/13/the-may-2025-security-update-review 2025-05-13 18:15:19+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lp33p64qow2w 2025-05-13 18:51:58+00:00| seen|...

CVE-2025-40566

creationtimestamp| type| source ---|---|--- 2025-05-13 09:54:54+00:00| seen| https://bsky.app/profile/potato.software/post/3lp27qebazh2e 2025-05-13 10:30:32+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16105 2025-05-13 10:52:36+00:00| seen|...

kernel: net/mlx5e: CT: Fix null-ptr-deref in add rule err flow

A flaw was found in the Linux kernel's Mellanox mlx5 network driver. An uninitialized pointer is improperly accessed within the driver's error-handling path when adding connection tracking rules. A local user can exploit this vulnerability during a rule configuration failure, triggering a null...

CVE-2024-28956

Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution for some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...

PT-2025-21188

Name of the Vulnerable Software and Affected Versions: Thunderbird versions prior to 128.10.1 Thunderbird versions prior to 138.0.1 Description: The issue allowed an attacker to craft an email that showed a tracking link as an attachment. When the user attempted to open the attachment, Thunderbir...

Roblox Lawsuit Claims Hidden Tracking Used to Monetize Kids Data

Roblox hit with class action over alleged secret tracking of kids' data; lawsuit claims privacy law violations and…...

CVE-2025-31247

creationtimestamp| type| source ---|---|--- 2025-05-12 22:47:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3loz2g35uwr2e 2025-05-13 01:19:35+00:00| seen| https://t.me/cvedetector/25135 2026-04-02 22:17:36+00:00| seen| Telegram/D2Q8ZJtbt01PhfwyXC7lQ4EJlbjNcIuURdjGDUEt8LUtAQ...

CVE-2025-4533

creationtimestamp| type| source ---|---|--- 2025-05-11 07:27:33+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15923 2025-05-11 08:37:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lov2hgfwiu2w 2025-05-11 10:09:58+00:00| seen|...

Google Pays $1.375 Billion to Texas Over Unauthorized Tracking and Biometric Data Collection

Google has agreed to pay the U.S. state of Texas nearly $1.4 billion to settle two lawsuits that accused the company of tracking users' personal location and maintaining their facial recognition data without consent. The $1.375 billion payment dwarfs the fines the tech giant has paid to settle...

CVE-2022-1390

creationtimestamp| type| source ---|---|--- 2025-05-10 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2025-05-10 2026-05-18 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2026-05-18 2026-06-06 00:00:00+00:00| exploited| The Shadowserver...

CVE-2025-4481

creationtimestamp| type| source ---|---|--- 2025-05-09 17:25:48+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15785 2025-05-09 18:13:41+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3loqzm767aod2 2025-05-09...

US Customs and Border Protection Plans to Photograph Everyone Exiting the US by Car

A CBP spokesperson tells WIRED that the agency plans to expand its program for real-time face recognition at the border, potentially aiding Trump administration efforts to track people who self-deport...

CVE-2025-47626

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in apasionados Submission DOM tracking for Contact Form 7 cf7-submission-dom-tracking allows Stored XSS.This issue affects Submission DOM tracking for Contact Form 7: from n/a through = 2.1...

CVE-2025-47633

Cross-Site Request Forgery CSRF vulnerability in Awin Awin – Advertiser Tracking for WooCommerce awin-advertiser-tracking allows Cross Site Request Forgery.This issue affects Awin – Advertiser Tracking for WooCommerce: from n/a through = 2.0.0...

CVE-2025-47538

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in wpdever Cart tracking for WooCommerce cart-tracking-for-woocommerce allows SQL Injection.This issue affects Cart tracking for WooCommerce: from n/a through = 1.0.17...