Mozilla Firefox 139.0.4 Released

June 12, 2025

Mozilla Firefox 139.0.4 Released

Mozilla has rolled out Firefox version 139.0.4 on June 10, 2025, as a part of its ongoing commitment to performance stability, user experience enhancement, and robust security. This is a point-release …

Published Date:
Jun 12, 2025 (4 hours, 56 minutes ago)

Vulnerabilities has been mentioned in this article.

Source: Read More

Previous ArticleUrgent GitLab Security Alert: High-Severity Flaws Allow Account Takeover & Code Injection!

Next Article Flaws in Weidmueller IE-SR-2TX Routers Allow Remote Root Access!

Highlights

CVE-2025-6504 – HDP Server IP Spoofing Via X-Forwarded-For Header

July 29, 2025

CVE ID : CVE-2025-6504

Published : July 29, 2025, 1:15 p.m. | 10 hours, 44 minutes ago

Description : In HDP Server versions below 4.6.2.2978 on Linux, unauthorized access could occur via IP spoofing using the X-Forwarded-For header.

Since XFF is a client-controlled header, it could be spoofed, allowing unauthorized access if the spoofed IP matched a whitelisted range.

This vulnerability could be exploited to bypass IP restrictions, though valid user credentials would still be required for resource access.

Severity: 8.4 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Top 15 Enterprise Use Cases That Justify Hiring Node.js Developers in 2025

The Core Model: Start FROM The Answer, Not WITH The Solution

AI-Generated Code Poses Major Security Risks in Nearly Half of All Development Tasks, Veracode Research Reveals

Understanding the code modernization conundrum

Not just YouTube: Google is using AI to guess your age based on your activity – everywhere

Malicious extensions can use ChatGPT to steal your personal data – here’s how

What Zuckerberg’s ‘personal superintelligence’ sales pitch leaves out

This handy NordVPN tool flags scam calls on Android – even before you answer

Route Optimization through Laravel’s Shallow Resource Architecture

Route Optimization through Laravel’s Shallow Resource Architecture

This Week in Laravel: Laracon News, Free Laravel Idea, and Claude Code Course

Everything We Know About Pest 4

FOSS Weekly #25.31: Kernel 6.16, OpenMandriva Review, Conky Customization, System Monitoring and More

FOSS Weekly #25.31: Kernel 6.16, OpenMandriva Review, Conky Customization, System Monitoring and More

Windows 11’s MSN Widgets board now opens in default browser, such as Chrome (EU only)

Microsoft’s new “move to Windows 11” campaign implies buying OneDrive paid plan

Mozilla Firefox 139.0.4 Released

Mozilla Firefox 139.0.4 Released

The hidden risks of browser extensions – and how to stay safe

Minnesota National Guard Deployed After Major Cyberattack on St. Paul City Systems

CVE-2015-10137 – WordPress Website Contact Form With File Upload Remote Code Execution (RCE)

FermiNet: Quantum physics and chemistry from first principles

Cyber Brief 25-07 – June 2025

CVE-2025-6114 – D-Link DIR-619L Stack-Based Buffer Overflow Vulnerability

CVE-2025-6504 – HDP Server IP Spoofing Via X-Forwarded-For Header

Borg ER-3 is a portable audio synthesizer

CVE-2025-46612 – Airleader Master and Easy JSP File Upload Remote Command Execution

CVE-2025-49739 – Visual Studio Link Following Privilege Escalation Vulnerability

Mozilla Firefox 139.0.4 Released

Mozilla Firefox 139.0.4 Released

Related Posts