Aggregator

A vulnerability classified as problematic was found in Mozilla Firefox up to 142. This affects an unknown function. Such manipulation leads to integer overflow. This vulnerability is traded as CVE-2025-10533. Access to the local network is required for this attack to succeed. There is no exploit available. Upgrading the affected component is advised.

A vulnerability was found in Mozilla Firefox up to 142 and classified as problematic. Affected by this issue is some unknown functionality. The manipulation results in information disclosure. This vulnerability was named CVE-2025-10536. The attack needs to be approached within the local network. There is no available exploit. It is suggested to upgrade the affected component.

A vulnerability labeled as problematic has been found in element-hq element-web up to 1.11.111. Affected by this vulnerability is an unknown functionality. Executing manipulation can lead to state issue. The identification of this vulnerability is CVE-2025-59161. The attack may be launched remotely. There is no exploit available. The affected component should be upgraded.

A vulnerability classified as problematic was found in matrix-org matrix-js-sdk up to 38.1.x. This issue affects the function MatrixClient::getJoinedRooms. Such manipulation leads to insufficient verification of data authenticity. This vulnerability is listed as CVE-2025-59160. The attack may be performed from remote. There is no available exploit. Upgrading the affected component is advised.

🔒网络安全大闯关！这些知识你都能答对吗？🛡️在这个信息爆炸的时代，网络安全就像是我们数字生活的“隐形盾牌”。

当前环境出现异常，需完成验证后才能继续访问。

当前环境出现异常，需完成验证后方可继续访问。

当前环境出现异常状态,需完成验证后才能继续访问。

文章指出当前环境出现异常，请进行验证以继续访问服务。

当前环境出现异常状态，需完成验证后方可继续访问服务。

由于环境异常，请完成验证以继续访问。

车顶维权女车主出镜发声：4 年了，我终于赢了特斯拉； OpenAI 发 ChatGPT 报告：周活跃数超 7 亿、女性用户比例首超男性、73% AI 话题和工作无关； 苹果 A20 芯片将采用台积电 2nm 工艺

Last updated 7:00 p.m. ET on September 16, 2025

The post Ongoing npm Software Supply Chain Attack Exposes New Risks appeared first on Security Boulevard.

文章指出一起针对npm软件供应链的持续性攻击事件，揭示了新的安全风险。攻击者利用漏洞或后门，在开发者和企业环境中植入恶意代码，导致系统面临潜在威胁。