CVE-2025-9211

Unescaped stored values in application security page in Otalio Ship Property Management System versions before 2.22.0 allows authenticated attackers to escalate privileges via persistent cross-site scripting...

CVE-2025-9211

Otalio Ship Property Management System versions before 2.22.0 contain a stored cross-site scripting (XSS) vulnerability in the application security page caused by unescaped stored values . An authenticated attacker can exploit this to escalate privileges by injecting persistent scripts. The CVSS ...

CVE-2025-9211 Cross-site scripting in Otalio Ship Property Management System

Unescaped stored values in application security page in Otalio Ship Property Management System versions before 2.22.0 allows authenticated attackers to escalate privileges via persistent cross-site scripting...

CVE-2026-56288

creationtimestamp| type| source ---|---|--- 2026-07-09 12:09:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq7m2flgdc2x 2026-07-09 12:15:05+00:00| seen| https://cert.pl/en/posts/2026/07/CVE-2026-56288...

Stable Channel Update for Desktop

The Stable channel has been updated to 150.0.7871.114/.115 for Windows and Mac and 150.0.7871.114 for Linux, which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log Security Fixes and Rewards Note: Access to bug details and links may be kept...

Stable Channel Update for Desktop

The Stable channel has been updated to 149.0.7827.155/.156 for Windows and Mac and 149.0.7827.155 for Linux, which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log Security Fixes and Rewards Note: Access to bug details and links may be kept...

CVE-2026-54014

creationtimestamp| type| source ---|---|--- 2026-06-11 19:04:46+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-j2c8-v969-8r5c...

Stable Channel Update for Desktop

The Chrome team is delighted to announce the promotion of Chrome 148 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 148.0.7778.96 Linux 148.0.7778.96/97 Windows/Mac contains a number of fixes and improvements -- a list of changes is availab...

CVE-2026-34820

Endian Firewall

Security Bulletin: NVIDIA B300 MCU - March 2026

NVIDIA has released a software update for NVIDIA® B300 to address the security issues described in this bulletin. To protect your system, download and install the latest version of the NVIDIA B300 firmware from the NVIDIA Developer Tools page. Go to NVIDIA Product Security. Details The following...

CVE-2026-1958

creationtimestamp| type| source ---|---|--- 2026-03-23 10:55:00+00:00| seen| https://cert.pl/en/posts/2026/03/CVE-2026-1958/ 2026-03-23 14:58:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhqd4gktwy2n...

CVE-2026-22735

creationtimestamp| type| source ---|---|--- 2026-03-21 03:00:04+00:00| seen| https://spring.io/security/cve-2026-22737...

Stable Channel Update for Desktop

The Stable channel has been updated to 146.0.7680.153/154 for Windows/Mac and 146.0.7680.153 for Linux, which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log Security Fixes and Rewards Note: Access to bug details and links may be kept...

CVE-2026-21333

creationtimestamp| type| source ---|---|--- 2026-03-11 14:35:00+00:00| seen| https://www.cert.se/2026/03/patchtisdag-mars-2026-samlad-information-om-manadens-sakerhetsuppdateringar.html 2026-03-21 06:33:04+00:00| seen| https://bsky.app/profile/secqube.com/post/3mhkfwoeryn2y...

Inside a fake Google security check that becomes a browser RAT

A website styled to resemble a Google Account security page is distributing what may be one of the most fully featured browser-based surveillance toolkits we have observed in the wild. Disguised as a routine security checkup, it walks victims through a four-step flow that grants the attacker push...

New FileFix Variant Delivers StealC Malware Through Multilingual Phishing Site

Cybersecurity researchers have warned of a new campaign that's leveraging a variant of the FileFix social engineering tactic to deliver the StealC information stealer malware. "The observed campaign uses a highly convincing, multilingual phishing site e.g., fake Facebook Security page, with...

Stable Channel Update for Desktop

The Stable channel has been updated to 139.0.7258.138/.139 for Windows, Mac and 139.0.7258.138 for Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log. Security Fixes and Rewards Note: Access to bug details and links may be kept...

CVE-2025-2181

creationtimestamp| type| source ---|---|--- 2025-08-13 14:00:00+00:00| seen| https://security.paloaltonetworks.com/CVE-2025-2181 2025-08-13 19:03:29+00:00| seen| https://bsky.app/profile/ripjyr.bsky.social/post/3lwcjbynckf2f...

Stable Channel Update for Desktop

The Stable channel has been updated to 138.0.7204.168/.169 for Windows, Mac and 138.0.7204.168 for Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log. Security Fixes and Rewards Note: Access to bug details and links may be kept...

Stable Channel Update for Desktop

The Stable channel has been updated to 137.0.7151.119/.120 for Windows, Mac and 137.0.7151.119 for Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log. Security Fixes and Rewards Note: Access to bug details and links may be kept...