45280 matches found
CVE-2025-54145: URL Redirection to Untrusted Site
The QR scanner could allow arbitrary websites to be opened if a user was tricked into scanning a malicious link that leveraged Firefox's open-text URL scheme. This vulnerability was fixed in Firefox for iOS 141...
CVE-2025-54143: Protection Mechanism Failure
Sandboxed iframes on webpages could potentially allow downloads to the device, bypassing the expected sandbox restrictions declared on the parent page. This vulnerability was fixed in Firefox for iOS 141...
CVE-2025-55031: URL Redirection to Untrusted Site
Malicious pages could use Firefox for iOS to pass FIDO: links to the OS and trigger the hybrid passkey transport. An attacker within Bluetooth range could have used this to trick the user into using their passkey to log the attacker's computer into the target account. This vulnerability was fixed...
Security Vulnerabilities fixed in Focus for iOS 142 — Mozilla
Focus for iOS would not respect a Content-Disposition header of type Attachment and would incorrectly display the content inline, potentially allowing for XSS attacks Dragging JavaScript links to the URL bar in Focus for iOS could be utilized to run malicious scripts, potentially resulting in XSS...
Mozilla Firefox for iOS 安全漏洞
Mozilla Firefox for iOS is a web browser designed for iOS devices by the US-based Mozilla Foundation. A denial of service vulnerability exists in Mozilla Firefox for iOS prior to version 142, which can be exploited by attackers to cause a denial of service...
CVE-2025-55033: Improper Neutralization of Input During Web Page Generation
Dragging JavaScript links to the URL bar in Focus for iOS could be utilized to run malicious scripts, potentially resulting in XSS attacks. This vulnerability was fixed in Focus for iOS 142...
CVE-2025-55030: Weak Password Recovery Mechanism for Forgotten Password
Firefox for iOS would not respect a Content-Disposition header of type Attachment and would incorrectly display the content inline rather than downloading, potentially allowing for XSS attacks. This vulnerability was fixed in Firefox for iOS 142...
CVE-2025-54144: URL Redirection to Untrusted Site
The URL scheme used by Firefox to facilitate searching of text queries could incorrectly allow attackers to open arbitrary website URLs or internal pages if a user was tricked into clicking a link. This vulnerability was fixed in Firefox for iOS 141...
PT-2025-33876 · Mozilla · Focus For Ios +1
Name of the Vulnerable Software and Affected Versions: Firefox for iOS versions prior to 142 Focus for iOS versions prior to 142 Description: Malicious pages could exploit Firefox for iOS to pass FIDO links to the operating system, triggering the hybrid passkey transport. An attacker within...
Linux Distros Unpatched Vulnerability : CVE-2021-30936
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS...
The vulnerability of operating systems visionOS, macOS, tvOS, iPadOS, iOS, iPadOS, macOS, related to uncontrolled resource consumption, allows attackers to trigger service failures.
The vulnerability of operating systems visionOS, macOS, tvOS, iPadOS, iOS, and iPadOS, macOS is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service interruptions using a specially created malware video file...
CVE-2025-20253
A vulnerability in the IKEv2 feature of Cisco IOS Software, IOS XE Software, Secure Firewall ASA Software, and Secure FTD Software could allow an unauthenticated, remote attacker to cause the device to reload, resulting in a DoS condition. This vulnerability is due to the improper processing of...
Malicious code in avalon-cli-run-ios (npm)
The package avalon-cli-run-ios was found to contain malicious code...
MAL-2025-23583 Malicious code in jailbreak-ios (npm)
The package jailbreak-ios was found to contain malicious code...
MAL-2025-17326 Malicious code in com.microsoft.azure.spatial-anchors-sdk.ios (npm)
The package com.microsoft.azure.spatial-anchors-sdk.ios was found to contain malicious code...
MAL-2025-15167 Malicious code in avalon-cli-build-ios (npm)
The package avalon-cli-build-ios was found to contain malicious code...
Malicious code in jailbreak-ios (npm)
The package jailbreak-ios was found to contain malicious code...
Malicious code in avalon-cli-build-ios (npm)
The package avalon-cli-build-ios was found to contain malicious code...