UVI-2021-1002298 staging: rtl8723bs: remove possible deadlock when disconnect (v2)

staging: rtl8723bs: remove possible deadlock when disconnect v2 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.82 by commit...

PT-2021-30763

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.10.82 Description The issue is related to a possible deadlock when disconnecting, specifically in the rtl8723bs staging driver. The actual impact and attack plausibility have not yet been proven. Recommendation...

PT-2021-26813

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.5 Description: A potential issue in the rtl8723bs staging driver may lead to a deadlock. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior...

PT-2021-26814

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.5 Description: A potential issue in the rtl8723bs staging driver may lead to a deadlock. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior...

PT-2021-30809

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.5 Description A potential issue in the rtl8723bs staging driver may lead to a deadlock. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2021-26768

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to 5.10.82 Description: A potential issue in the rtl8723bs staging driver may lead to a deadlock when disconnecting. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux...

CVE-2021-24877

The MainWP Child WordPress plugin before 4.1.8 does not validate the orderby and order parameter before using them in a SQL statement, leading to an SQL injection exploitable by high privilege users such as admin when the Backup and Staging by WP Time Capsule plugin is installed...

Sql injection

The MainWP Child WordPress plugin before 4.1.8 does not validate the orderby and order parameter before using them in a SQL statement, leading to an SQL injection exploitable by high privilege users such as admin when the Backup and Staging by WP Time Capsule plugin is installed...

CVE-2021-24877 MainWP Child < 4.1.8 - Admin+ SQL Injection

The MainWP Child WordPress plugin before 4.1.8 does not validate the orderby and order parameter before using them in a SQL statement, leading to an SQL injection exploitable by high privilege users such as admin when the Backup and Staging by WP Time Capsule plugin is installed...

CVE-2021-24877: Improper Neutralization of Special Elements used in an SQL Command

The MainWP Child WordPress plugin before 4.1.8 does not validate the orderby and order parameter before using them in a SQL statement, leading to an SQL injection exploitable by high privilege users such as admin when the Backup and Staging by WP Time Capsule plugin is installed...

GSD-2021-1002209 staging: rtl8712: fix use-after-free in rtl8712_dl_fw

staging: rtl8712: fix use-after-free in rtl8712dlfw This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.2 by commit...

UVI-2021-1002209 staging: rtl8712: fix use-after-free in rtl8712_dl_fw

staging: rtl8712: fix use-after-free in rtl8712dlfw This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.2 by commit...

GSD-2021-1002139 staging: rtl8712: fix use-after-free in rtl8712_dl_fw

staging: rtl8712: fix use-after-free in rtl8712dlfw This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.18 by commit...

UVI-2021-1002139 staging: rtl8712: fix use-after-free in rtl8712_dl_fw

staging: rtl8712: fix use-after-free in rtl8712dlfw This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.18 by commit...

GSD-2021-1002072 staging: rtl8712: fix use-after-free in rtl8712_dl_fw

staging: rtl8712: fix use-after-free in rtl8712dlfw This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.79 by commit...

PT-2024-11491 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A memory leak has been resolved in the Linux kernel, specifically in the r8188eu staging driver. The issue was fixed by freeing the ptmp variable before returning an error code -EINVAL...

HackerOne: HackerOne Staging uses Production data for testing

Summary: Today I received an email related to smart rewards from HackerOne. This included staging environment details, such as: sender: [email protected] Privacy / Terms links pointing to domain: https://www.enorekcah.com/... This basically tells us that HackerOne is using hacker dat...

PT-2021-8186

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the allocation of USB transfer buffers on the stack in the Linux kernel's comedi: dt9812 component. These buffers are typically mapped for DMA and should not be...

WordPress Cross-Site Scripting Vulnerability (CNVD-2021-83665)

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress plugin Content Staging, which stems fro...

MainWP Child < 4.1.8 - Admin+ SQL Injection

The plugin does not validate the orderby and order parameter before using them in a SQL statement, leading to an SQL injection exploitable by high privilege users such as admin when the Backup and Staging by WP Time Capsule plugin is installed PoC POST / HTTP/1.1 Accept:...