#firefox

SLiMS CMS version 2.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.

StarTask CRM version 1.9 suffers from a remote SQL injection vulnerability that allows for authentication bypass.

UBM CMS version 1.2 suffers from an insecure direct object reference vulnerability.

TAIF LMS version 5.8.0 suffers from a remote shell upload vulnerability.

Vencorp version 2.1.1 suffers from a remote SQL injection vulnerability that allows for authentication bypass.

Webdenim AppUI version 1.0 suffers from an insecure direct object reference vulnerability.

A now-patched security flaw in the Microsoft Defender SmartScreen has been exploited as part of a new campaign designed to deliver information stealers such as ACR Stealer, Lumma, and Meduza. Fortinet FortiGuard Labs said it detected the stealer campaign targeting Spain, Thailand, and the U.S. using booby-trapped files that exploit CVE-2024-21412 (CVSS score: 8.1). The high-severity

Google has taken a new turn in the approach to eliminating third-party cookies. This time it's back to the Privacy Sandbox

Red Hat Security Advisory 2024-4717-03 - An update for thunderbird is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support.

LMS ZAI version 6.1 suffers from an ignored default credential vulnerability.