Astra Linux – Vulnerability in Firefox

One phishing tactic on the internet involves providing a link with HTTP Auth. For example, it might look like “https://[email protected]”. To mitigate this type of attack, Firefox will display a warning dialog box. However, this warning dialog would not be shown if evil.com used a...

Astra Linux – vulnerability in Firefox and Thunderbird

If the Content Security Policy blocks frame navigation, the full destination of a redirect served within the frame is reported in the violation report; unlike the original frame URI. This can be exploited to leak sensitive information contained in such URIs. This vulnerability affects Firefox 86,...

Astra Linux – Vulnerability in Firefox

Context-specific code was included in a shared jump table, resulting in assertions being triggered in multithreaded Wasm code. This vulnerability affects Firefox versions earlier than 86...

Astra Linux – Vulnerability in Firefox

When processing a redirect that conflicts with a Referrer-Policy, Firefox would adopt the Referrer-Policy of the redirect. This could potentially result in more information than intended by the original origin being provided to the destination of the redirect. This vulnerability affects Firefox...

CLSA-2026-1779065207 TuxCare security update for 2 packages (2 CVEs)

TuxCare rebuilt 2 packages to address 2 CVEs. Fixed in 9.4.62.tuxcare0001...

CLSA-2026-1776040415 TuxCare security update for org.eclipse.jetty (4 CVEs)

TuxCare rebuilt 2 org.eclipse.jetty packages to address 4 CVEs. Fixed in 9.4.53.v20231009-tuxcare.3...

CLSA-2026-1775781157 TuxCare security update for 2 packages (2 CVEs)

TuxCare rebuilt 2 packages to address 2 CVEs. Fixed in 9.4.61.tuxcare0001...

CLSA-2026-1773879458 TuxCare security update for 2 packages (2 CVEs)

TuxCare rebuilt 2 packages to address 2 CVEs. Fixed in 9.4.60.tuxcare0001...

CLSA-2025-1764547660 TuxCare security update for org.eclipse.jetty:jetty-server (1 CVE)

TuxCare rebuilt org.eclipse.jetty:jetty-server to address 1 CVE. Fixed in 9.4.53.v20231009-tuxcare.2...

[SECURITY] Fedora 43 Update: nasm-2.16.03-5.fc43

NASM is the Netwide Assembler, a free portable assembler for the Intel 80x86 microprocessor series, using primarily the traditional Intel instruction mnemonics and syntax...

SpyCloud Report Finds Phishing Attacks Surge as Employee Data Is Exposed at 86% of Fortune 100 Companies

Austin, TX, USA, 17th June 2026, CyberNewswire...

PT-2026-40437

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description Insufficient sanitization of SQL queries in the sqloptimizer utility script allows SQL Injections on behalf of the root user if Slow Query logging is enabled...

2026-04 Cumulative Update for Windows 10 Version 22H2 for x86-based Systems (KB5082200)

2026-04 Cumulative Update for Windows 10 Version 22H2 for x86-based Systems KB5082200...

CVE-2026-5586

creationtimestamp| type| source ---|---|--- 2026-04-05 19:36:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miripfabr425...

HTTP Fetch, Windows x86 Pingback, Reverse TCP Inline

Fetch and execute an x86 payload from an HTTP server. Connect back to attacker and report UUID Windows x86 Module Options msf use payload/cmd/windows/http/x86/pingbackreversetcp msf payloadpingbackreversetcp show actions ...actions... msf payloadpingbackreversetcp set ACTION msf...

2026-02 .NET 10.0.3 Security Update for x86 Client (KB5077862)

2026-02 .NET 10.0.3 Security Update for x86 Client KB5077862...

EUVD-2026-4086

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in xtemos WoodMart woodmart allows Code Injection.This issue affects WoodMart: from n/a through = 8.3.7...

DEBIAN-CVE-2022-50876

In the Linux kernel, the following vulnerability has been resolved: usb: musb: Fix musbgadget.c rxstate overflow bug The usb function device call musbgadgetqueue adds the passed request to musbep::reqlist,If the request-length musbep-packetsz and isbuffermappedreq return false,the rxstate will co...

CVE-2025-68463

Bio.Entrez in Biopython through 186 allows doctype XXE...

CVE-2025-8869

When extracting a tar archive pip may not check symbolic links point into the extraction directory if the tarfile module doesn't implement PEP 706. Note that upgrading pip to a "fixed" version for this vulnerability doesn't fix all known vulnerabilities that are remediated by using a Python versi...