5002 matches found
Security Vulnerabilities fixed in Focus for iOS 143.0 — Mozilla
Opening links via the contextual menu in Focus iOS for certain URL schemes would fail to load but would not refresh the toolbar correctly, allowing attackers to spoof websites if users were coerced into opening a link explicitly through a long-press...
MAL-2025-47163 Malicious code in @nstudio/focus (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6368724cc7cb8430603780da22934b69de3dc873637938a51bb363cbdde04ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @nstudio/focus (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6368724cc7cb8430603780da22934b69de3dc873637938a51bb363cbdde04ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. Compromised versions of this package contain a file called bundle.js that exfiltrates secrets from the user's accounts, including credentials and API tokens. It also downloads malicious files and repackages them...
ECHO-6344-F9A1-8E94
Bulletin has no description...
AI browsers or agentic browsers: a look at the future of web surfing
Browsers like Chrome, Edge, and Firefox are our traditional gateway to the internet. But lately, we have seen a new generation of browsers emerge. These are AI-powered browsers or "agentic browsers"—which are not to be confused with your regular browsers that have just AI-powered plugins bolted o...
CISA Strategic Focus: CVE Quality for a Cyber Secure Future
The Cybersecurity and Infrastructure Security Agency CISA released CISA Strategic Focus: CVE Quality for a Cyber Secure Future. This detailed roadmap identifies priorities that will elevate the program to meet the needs of the global cybersecurity community. The roadmap and priorities are informe...
Multiple race conditions in the font initialization could have led to memory corruption and execution of attacker-controlled code. This vulnerability affects Firefox for Android < 112, Firefox < 112, and Focus for Android < 112.
...
An attacker could have caused memory corruption and a potentially exploitable use-after-free of a pointer in a global object's debugger vector. This vulnerability affects Firefox for Android < 112, Firefox < 112, and Focus for Android < 112.
...
If multiple instances of resource exhaustion occurred at the incorrect time, the garbage collector could have caused memory corruption and a potentially exploitable crash. This vulnerability affects Firefox for Android < 112, Firefox < 112, and Focus for Android < 112.
...
When a secure cookie existed in the Firefox cookie jar an insecure cookie for the same domain could have been created, when it should have silently failed. This could have led to a desynchronization in expected results when reading from the secure cookie. This vulnerability affects Firefox for Android < 112, Firefox < 112, and Focus for Android < 112.
...
Malicious code in sensitive-paths-focus (npm)
The package sensitive-paths-focus was found to contain malicious code...
MAL-2025-42081 Malicious code in sensitive-paths-focus (npm)
The package sensitive-paths-focus was found to contain malicious code...
Mozilla Focus for iOS Cross-Site Scripting Vulnerability (CNVD-2025-19557)
Mozilla Focus for iOS is a privacy browser from the US-based Mozilla Foundation designed for iOS devices. A cross-site scripting vulnerability exists in versions prior to Mozilla Focus for iOS 142, which can be exploited by an attacker to execute arbitrary web script or HTML via injection of a...
Mozilla Focus for iOS cross-site scripting vulnerability (CNVD-2025-19558)
Mozilla Focus for iOS is a privacy browser from the US-based Mozilla Foundation designed for iOS devices. A cross-site scripting vulnerability exists in Mozilla Focus for iOS prior to version 142, which stems from an improper handling of the Content-Disposition header, and can be exploited by an...
CGA-7H85-4QRC-XP92
Bulletin has no description...
CGA-4F8P-43G6-84WP
Bulletin has no description...
CVE-2025-55032
Focus for iOS would not respect a Content-Disposition header of type Attachment and would incorrectly display the content inline, potentially allowing for XSS attacks. This vulnerability was fixed in Focus for iOS 142...
CVE-2025-55033
Dragging JavaScript links to the URL bar in Focus for iOS could be utilized to run malicious scripts, potentially resulting in XSS attacks. This vulnerability was fixed in Focus for iOS 142...