PT-2022-30007

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.34 Description The issue is related to the ath11k driver in the Linux Kernel, specifically with the mhi sync power up function. The actual impact and attack plausibility have not yet been proven...

PT-2022-29683

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.20 Description The issue is related to the ath11k driver in the Linux Kernel, specifically with the mhi sync power up function. The actual impact and attack plausibility have not yet been proven...

PT-2022-29355

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.3 Description The issue is related to the Bluetooth functionality in the Linux Kernel, specifically with the hci sync function. It involves queuing commands when HCI UNREGISTER is set. The actual impact and...

PT-2025-8238

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A deadlock issue was found in the Linux kernel, specifically in the sa1100 set termios function. This occurs when two threads attempt to access the same lock, resulting in a situation...

PT-2025-8239

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A deadlock issue exists in the Linux kernel, specifically in the ieee80211 beacons stop function. This occurs when two threads attempt to access the ieee-beacon lock simultaneously,...

PT-2025-8249

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A deadlock issue exists in the Linux kernel, specifically in the rtllib beacons stop function. This occurs when two threads attempt to access the ieee-beacon lock simultaneously, causing...

WordPress Videos sync PDF 1.7.4 Plugin - Stored Cross Site Scripting Vulnerability

Exploit Title: WordPress Plugin Videos sync PDF 1.7.4 - Stored Cross Site Scripting XSS Google Dork: inurl:/wp-content/plugins/video-synchro-pdf/ Exploit Author: UnD3sc0n0c1d0 Vendor Homepage: http://www.a-j-evolution.com/ Software Link:...

Videos sync PDF <= 1.7.4 - Stored Cross-Site Scripting via CSRF

The plugin does not have CSRF check in place when editing a video, and does not escape some of its fields, which could allow attackers to make a logged in admin change them and lead to Stored Cross-Site Scripting issues 2, 00:00:10-3, 00:00:15-4, 00:00:20-5" /...

WordPress Plugin Videos sync PDF 1.7.4 - Stored Cross Site Scripting (XSS)

Exploit Title: WordPress Plugin Videos sync PDF 1.7.4 - Stored Cross Site Scripting XSS Google Dork: inurl:/wp-content/plugins/video-synchro-pdf/ Date: 2022-04-13 Exploit Author: UnD3sc0n0c1d0 Vendor Homepage: http://www.a-j-evolution.com/ Software Link:...

CVE-2022-0915

There is a Time-of-check Time-of-use TOCTOU Race Condition Vulnerability in Logitech Sync for Windows prior to 2.4.574. Successful exploitation of these vulnerabilities may escalate the permission to the system user...

CVE-2022-0915

There is a Time-of-check Time-of-use TOCTOU Race Condition Vulnerability in Logitech Sync for Windows prior to 2.4.574. Successful exploitation of these vulnerabilities may escalate the permission to the system user...

Race condition

There is a Time-of-check Time-of-use TOCTOU Race Condition Vulnerability in Logitech Sync for Windows prior to 2.4.574. Successful exploitation of these vulnerabilities may escalate the permission to the system user...

CVE-2022-0915

CVE-2022-0915 concerns the Logitech Sync desktop application for Windows prior to 2.4.574. The issue is a TOCTOU race condition during installation that may allow an attacker to escalate privileges to the system user. Affected product: Logitech Sync on Windows (pre-2.4.574). Root cause: race cond...

CVE-2022-0915 Logitech Sync desktop application prior to 2.4.574 - TOCTOU during installation leads to privelege escalation

There is a Time-of-check Time-of-use TOCTOU Race Condition Vulnerability in Logitech Sync for Windows prior to 2.4.574. Successful exploitation of these vulnerabilities may escalate the permission to the system user...

CVE-2022-0915: Time-of-check Time-of-use (TOCTOU) Race Condition

There is a Time-of-check Time-of-use TOCTOU Race Condition Vulnerability in Logitech Sync for Windows prior to 2.4.574. Successful exploitation of these vulnerabilities may escalate the permission to the system user...

Logitech Sync for Windows 安全漏洞

Logitech Sync for Windows is a crossover application from Logitech Switzerland. A security vulnerability exists in Logitech Sync for Windows versions prior to 2.4.574, which could be exploited by an attacker to elevate privileges...

PT-2022-13523

Name of the Vulnerable Software and Affected Versions Logitech Sync for Windows versions prior to 2.4.574 Description The issue is related to a Time-of-check Time-of-use TOCTOU Race Condition, which may allow escalation of permission to the system user if successfully exploited. Recommendations F...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF in StylemixThemes eRoom – Zoom Meetings & Webinar WordPress plugin = 1.3.7 allows an attacker to Sync with Zoom Meetings...

eRoom < 1.3.8 - Sync Meetings via CSRF

The plugin does not have CSRF check in place when syncing meetings, which could allow attackers to make logged in users perform such action via a CSRF attack...

PT-2022-17409

Name of the Vulnerable Software and Affected Versions StylemixThemes eRoom – Zoom Meetings & Webinar WordPress plugin versions 1.3.7 and earlier Description The issue concerns a Cross-Site Request Forgery CSRF that allows an attacker to perform unauthorized actions, specifically to Sync with Zoom...