firefox: thunderbird: Use-after-free in the WebRTC: Signaling component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the WebRTC: Signaling component...

firefox: thunderbird: Use-after-free in the WebRTC: Signaling component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the WebRTC: Signaling component...

firefox: thunderbird: Use-after-free in the WebRTC: Signaling component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the WebRTC: Signaling component...

PT-2026-1240

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the ptp clock settime function. This function incorrectly assumes that every precision time protocol PTP clock has implemented the settime64...

Autonomous Threat Detection and Response in Cloud Security: A Comprehensive Survey of AI-Driven Strategies

Cloud computing has changed online communities in three dimensions, which are scalability, adaptability and reduced overhead. But there are serious security concerns which are brought about by its distributed and multi-tenant characteristics. The old methods of detecting and reacting to threats...

Important: firefox

Issue Overview: Use-after-free in the WebRTC: Signaling component. This vulnerability affects Firefox 146 and Firefox ESR 140.6. CVE-2025-14321 Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability affects Firefox 146, Firefox ESR 115.31, a...

PT-2026-1242

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the amlogic-a4 Real Time Clock RTC driver. A double free issue occurs because the clock obtained via devm clk get enabled is automatically managed by...

CVE-2026-0576

creationtimestamp| type| source ---|---|--- 2026-01-04 11:00:38+00:00| published-proof-of-concept| Telegram/WAeIMp-qLoix2fMN5m4VAPW7c3mTPvm4gc9HGkPHwEa3bG0 2026-01-04 12:49:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mblxjyyw4q2c...

MAL-2026-33 Malicious code in blobhunter-depconf-poc (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 6bbf9ae244466116ca709955328b8ae27867658e636ac521004edd501b38d4ef Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

[SECURITY] Fedora 42 Update: nginx-mod-fancyindex-0.5.2-13.fc42

The Fancy Index module makes possible the generation of file listings, like the built-in autoindex module does, but adding a touch of style. This is possible because the module allows a certain degree of customization of the generated content: Custom headers. Either local or stored remotely. Cust...

Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Linux Linux_Kernel

Chronomaly Chronomaly is a kernel exploit for the Android / L...

MAL-2026-31 Malicious code in telstra (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e6ff467569b104f23ebbdc6ef58dec14795aaf14548185bd3b31886ecd9b8003 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

[SECURITY] Fedora 42 Update: usd-25.02a-5.fc42

Universal Scene Description USD is a time-sampled scene description for interchange between graphics applications...

Malicious code in gatr (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 5d3d1723e01bd7a4d33591053ec24cde4369a19677874b25a7d73dfa4dadf46e Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

CVE-2025-15417

creationtimestamp| type| source ---|---|--- 2026-01-02 02:23:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbftmw37os2x...

[SECURITY] Fedora 43 Update: usd-25.08-13.fc43

Universal Scene Description USD is a time-sampled scene description for interchange between graphics applications...

CVE-2025-69288

Titra is open source project time tracking software. Prior to version 0.99.49, Titra allows any authenticated Admin user to modify the timeEntryRule in the database. The value is then passed to a NodeVM value to execute as code. Without sanitization, it leads to a Remote Code Execution. Version...

MAL-2026-5 Malicious code in queryservice-client (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 92aafbccc7065760e0127931c5150c59561f3b753ab9fe79dbcbdafd1aef97dc Dependency confusion PoC that exfiltrates also potentially sensitive environment variables --- Category: MALICIOUS - The campaign has clearly malicious intent,...

CVE-2025-15431

creationtimestamp| type| source ---|---|--- 2026-01-01 12:57:10+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115819952898592287 2026-01-02 07:00:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbgd4k2u3n2u 2026-01-02 18:54:15+00:00| published-proof-of-concep...

CVE-2025-61037

A local privilege escalation vulnerability exists in SevenCs ORCA G2 2.0.1.35 EC2007 Kernel v5.22. The flaw is a Time-of-Check Time-of-Use TOCTOU race condition in the license management logic. The regService process, which runs with SYSTEM privileges, creates a fixed directory and writes files...