Authorization Bypass

chromium is vulnerable to Authorization Bypasses. This obfuscation vulnerability could be exploited by a malicious website. The vulnerability could allows an attacker to hide security warnings and notifications from the user, making it easier to trick the user into clicking on a malicious link or...

Authorization Bypass

chromium is vulnerable to Authorization Bypasses. This obfuscation vulnerability could be exploited by a malicious website. The vulnerability could allow an attacker to hide security warnings and notifications from the user, making it easier to trick the user into granting permissions that they...

OPENSUSE-SU-2023:0225-1 Security update for perl-Cpanel-JSON-XS

This update for perl-Cpanel-JSON-XS fixes the following issues: perl-Cpanel-JSON-XS was updated to 4.36 see /usr/share/doc/packages/perl-Cpanel-JSON-XS/Changes 4.36 2023-03-02 rurban - remove the SAVESTACKPOS noop. Merged from JSON-XS-3.02, removed there with 4.0. requested to remove with L 4.35...

Mozilla Firefox Thunderbird Code Execution

The vulnerability in Mozilla Firefox, Firefox ESR, and the email client Thunderbird on Windows operating systems is related to insufficient warnings about dangerous actions when processing files with the appref-ms extension. Exploiting this vulnerability allows a remote attacker to execute...

Mozilla Firefox Permission Spoofing

The vulnerability of the Mozilla Firefox browser’s permission request window is related to insufficient warnings about dangerous actions. Exploiting this vulnerability allows a remote attacker to perform a spoofing attack...

PT-2024-14750

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the Linux kernel's i2c core, where non-atomic i2c transfers are used when preemption is disabled. However, non-atomic i2c transfers require preemption, which can...

Mozilla Firefox Full-screen Spoofing

The vulnerability of the full-screen mode of the Mozilla Firefox browser is related to insufficient warnings about dangerous actions. Exploiting this vulnerability can allow a remote attacker to perform a spoofing attack...

Mozilla Firefox Full-screen Notifications Spoofing

The vulnerability of full-screen notifications in Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to insufficient warnings about dangerous actions. Exploiting this vulnerability can allow a remote attacker to perform a spoofing attack...

A week in security (July 10 - 16)

Last week on Malwarebytes Labs: Tax preparation firms shared sensitive information with Meta Ransomware making big money through "big game hunting" Malwarebytes stops 100% of Advanced Threats in latest AV-Test assessment From Malvertising to Ransomware: A ThreatDown webinar recap Ransomware revie...

Zero Trust + Deception: Join This Webinar to Learn How to Outsmart Attackers!

Cybersecurity is constantly evolving, but complexity can give hostile actors an advantage. To stay ahead of current and future attacks, it's essential to simplify and reframe your defenses. Zscaler Deception is a state-of-the-art next-generation deception technology seamlessly integrated with the...

io.jenkins.plugins:forensics-api (2.2.0), io.jenkins.plugins:warnings-ng (10.2.0) potentially affected by CVE-2023-32977 via org.jenkins-ci.plugins.workflow:workflow-job (1292.v27d8cc3e2602)

org.jenkins-ci.plugins.workflow:workflow-job MAVEN version 1292.v27d8cc3e2602 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-job and may be impacted: - io.jenkins.plugins:forensics-api 2.2.0 -...

kernel: RDMA/irdma: Cap MSIX used to online CPUs + 1

A bounds checking flaw was found in the Intel RDMA irdma driver in the Linux kernel. The driver may request more MSIX vectors than online CPUs allow, then attempt to set CPU affinity hints with an invalid CPU mask. This triggers kernel warnings and could cause instability...

PT-2025-43124

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue within the DRM/amdgpu subsystem related to SDMA ECC interrupt handling during system suspend. Specifically, the sdma v4 0 hw fini function...

kernel: RDMA/irdma: Cap MSIX used to online CPUs + 1

A bounds checking flaw was found in the Intel RDMA irdma driver in the Linux kernel. The driver may request more MSIX vectors than online CPUs allow, then attempt to set CPU affinity hints with an invalid CPU mask. This triggers kernel warnings and could cause instability...

PT-2025-13375

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.2.0-rc3-rt1-yocto-preempt-rt 1 Description A vulnerability in the Linux kernel has been resolved, specifically in the octeontx2-pf module. The issue arises from the use of GFP KERNEL in an atomic context on...

Mozilla Firefox Android Full-screen Spoofing

The vulnerability in the full-screen notification mode of the Mozilla Firefox browser on Android operating systems relates to the absence of warnings about dangerous actions when loading suggestion windows. Exploiting this vulnerability allows a remote attacker to carry out spoofing attacks...

Mozilla Firefox Full-screen Spoofing

The vulnerability of the full-screen mode of the Mozilla Firefox browser is related to insufficient warnings about dangerous actions. Exploiting this vulnerability allows a remote attacker to carry out spoofing attacks...

SUSE CVE-2007-4565

sink.c in fetchmail before 6.3.9 allows context-dependent attackers to cause a denial of service NULL dereference and application crash by refusing certain warning messages that are sent over SMTP...

SUSE CVE-2017-1000102

The Details view of some Static Analysis Utilities based plugins, was vulnerable to a persisted cross-site scripting vulnerability: Malicious users able to influence the input to these plugins, for example the console output which is parsed to extract build warnings Warnings Plugin, could insert...

SUSE CVE-2018-1000012

Jenkins Warnings Plugin 4.64 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers with user permissions in Jenkins to extract secrets from the Jenkins master, perform server-side request forgery, or denial-of-service attacks...