NewsSecurityWeek
In Other News: Anthropic Breach Dispute, UEFI Flaw Hits Most Servers, Cloudflare AI Data Leak
More on Other
Other advisories
- Not ratedosv:CLEANSTART-2026-DV70438Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of callback is passed other than public key, then the source-address validation wou...
- Not ratedosv:CLEANSTART-2024-VU11249If the Compact() method was called on an nsTArray, the array could have been reallocated without updating other pointers, leading to a potential use-after-free and exploitable crash
- Not ratedosv:CLEANSTART-2024-VZ65902attacker with the ability to generate session IDs or password reset tokens, either by being able to authenticate or by exploiting OSA-2020-09, may be able to predict other users session IDs, passwo...
- Not ratedosv:CLEANSTART-2024-BJ94999It was possible to cause the browser to enter fullscreen mode without displaying the security UI; thus making it possible to attempt a phishing attack or otherwise confuse the user
- Not ratedosv:CLEANSTART-2024-SU55971XSS bug in internal error pages could have led to various spoofing attacks, including other error pages and the address bar
- Not ratedosv:CLEANSTART-2024-WD78196browser could have been confused into transferring a screen sharing state into another tab, which would leak unintended information
- Not ratedosv:CLEANSTART-2024-VY78190When accepting a malicious intent from other installed apps, Firefox for Android accepted manifests from arbitrary file paths and allowed declaring webapp manifests for other origins
- Not ratedosv:CLEANSTART-2024-VX80275By utilizing 3D CSS in conjunction with Javascript, content could have been rendered outside the webpage's viewport, resulting in a spoofing attack that could have been used for phishing or other a...
Other news entries
- New VOLTA Infostealer Uses Claude, Gemini, and Kimi AI to Rank Victims by Financial ValueNewsThe Hacker News
- b14g: about 97M CORE drained from its Core staking contracts; contracts pausedBreachpwn.watch
- British intelligence agency misplaced 'thousands' of storage devices, years later still can't say how manyNewsThe Register — Security
- A deep dive into China’s Volt Typhoon suggests it is preparing for an assault on infrastructureNewsCSO Online
- ThreatsDay: Critical Firewall Flaws, Banking Trojans Rented, Weaponized PDF, Token Theft + 26 More StoriesNewsThe Hacker News
- Linux Kernel TCP Flaw With 9.8 CVSS Score Affects Ubuntu, Red Hat and Other DistributionsNewsThe Hacker News
- Imposter abused trust in OpenAI, Anthropic, and 30 others to hunt for secretsNewsCSO Online
- Telegram Android Flaw Lets Attackers Run Code When Users Answer Voice CallsNewsThe Hacker News
ID