#firefox

Ubuntu Security Notice 6367-1 - It was discovered that Firefox did not properly manage memory when handling WebP images. If a user were tricked into opening a webpage containing malicious WebP image file, an attacker could potentially exploit these to cause a denial of service or execute arbitrary code.

Debian Linux Security Advisory 5496-1 - A buffer overflow in parsing WebP images may result in the execution of arbitrary code.

iSmile Soft CMS version 0.3.0 suffers from an add administrator vulnerability.

islamnt CMS version 2.1.0 suffers from an add administrator vulnerability.

islamnt CMS version 2.1.0 suffers from a cross site scripting vulnerability.

ImgHosting version 1.3 suffers from a cross site scripting vulnerability.

Kleeja version 1.5.4 suffers from a cross site scripting vulnerability.

K-LOANS version 1.4.5 suffers from an ignored default credential vulnerability.

Microsoft has released software fixes to remediate 59 bugs spanning its product portfolio, including two zero-day flaws that have been actively exploited by malicious cyber actors. Of the 59 vulnerabilities, five are rated Critical, 55 are rated Important, and one is rated Moderate in severity. The update is in addition to 35 flaws patched in the Chromium-based Edge browser since last month's

Mozilla on Tuesday released security updates to resolve a critical zero-day vulnerability in Firefox and Thunderbird that has been actively exploited in the wild, a day after Google released a fix for the issue in its Chrome browser. The shortcoming, assigned the identifier CVE-2023-4863, is a heap buffer overflow flaw in the WebP image format that could result in arbitrary code execution when