CVE-2025-9186: User Interface (UI) Misrepresentation of Critical Information

Spoofing issue in the Address Bar component of Firefox Focus for Android. This vulnerability was fixed in Firefox 142...

Mozilla Firefox for iOS and Mozilla Firefox Focus for iOS have security vulnerabilities

Mozilla Firefox for iOS and Mozilla Firefox Focus for iOS are both products of the Mozilla Foundation in the U.S. Mozilla Firefox for iOS is a web browser designed for iOS devices. Mozilla Firefox Focus for iOS is a privacy browser designed for iOS devices. A security vulnerability exists in...

PT-2025-33872

Name of the Vulnerable Software and Affected Versions: Firefox Focus versions prior to 142 Description: A spoofing issue exists in the Address Bar component of Firefox Focus for Android. Recommendations: Update Firefox Focus to version 142 or later...

Mozilla Firefox < 142.0

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 142.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-64 advisory. - Memory safety bugs present in Firefox 141 and Thunderbird 141. Some of these bugs showed evidence of memory...

CVE-2025-55032: URL Redirection to Untrusted Site

Focus for iOS would not respect a Content-Disposition header of type Attachment and would incorrectly display the content inline, potentially allowing for XSS attacks. This vulnerability was fixed in Focus for iOS 142...

Mozilla Firefox Focus for iOS security vulnerabilities

Mozilla Focus for iOS is a privacy browser from the US-based Mozilla Foundation designed for iOS devices. A cross-site scripting vulnerability exists in Mozilla Focus for iOS prior to version 142, which stems from an improper handling of the Content-Disposition header, and can be exploited by an...

CGA-P39R-4CFR-GQ82

Bulletin has no description...

Linux Distros Unpatched Vulnerability : CVE-2023-29538

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Under specific circumstances a WebExtension may have received a jar:file:/// URI instead of a moz-extension:/// URI during a load request. This leaked directory...

Linux Distros Unpatched Vulnerability : CVE-2023-29546

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When recording the screen while in Private Browsing on Firefox for Android the address bar and keyboard were not hidden, potentially leaking sensitive...

Linux Distros Unpatched Vulnerability : CVE-2023-29550

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory safety bugs present in Firefox 111 and Firefox ESR 102.9. Some of these bugs showed evidence of memory corruption and we presume that with enough effort...

Linux Distros Unpatched Vulnerability : CVE-2023-6870

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Applications which spawn a Toast notification in a background thread may have obscured fullscreen notifications displayed by Firefox. This issue only affects...

MAL-2025-20733 Malicious code in focus-sherlock (npm)

The package focus-sherlock was found to contain malicious code...

Malicious code in focus-sherlock (npm)

The package focus-sherlock was found to contain malicious code...

Malicious code in test-mlw2-haulm-mercy-focus-named (npm)

The package test-mlw2-haulm-mercy-focus-named was found to contain malicious code...

MAL-2025-31789 Malicious code in react-focus-lock-next (npm)

The package react-focus-lock-next was found to contain malicious code...

Malicious code in test-mlw2-tidal-focus (npm)

The package test-mlw2-tidal-focus was found to contain malicious code...

Malicious code in react-focus-lock-next (npm)

The package react-focus-lock-next was found to contain malicious code...

MAL-2025-36452 Malicious code in test-mlw2-tidal-focus (npm)

The package test-mlw2-tidal-focus was found to contain malicious code...

MAL-2025-35496 Malicious code in test-mlw2-haulm-mercy-focus-named (npm)

The package test-mlw2-haulm-mercy-focus-named was found to contain malicious code...

Fortinet SSL VPNs Hit by Global Brute-Force Wave Before Attackers Shift to FortiManager

Cybersecurity researchers are warning of a "significant spike" in brute-force traffic aimed at Fortinet SSL VPN devices. The coordinated activity, per threat intelligence firm GreyNoise, was observed on August 3, 2025, with over 780 unique IP addresses participating in the effort. As many as 56...