WordPress WPGateway 3.5 Privilege Escalation Vulnerability

Description: Unauthenticated Privilege Escalation Affected Plugin: WPGateway Plugin Slug: wpgateway Plugin Developer: Jack Hopman/WPGateway Affected Versions: = 3.5 CVE ID: CVE-2022-3180 CVSS Score: 9.8 Critical CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Fully Patched Version: N/A...

jacksavoretti.activeboard.com Cross Site Scripting vulnerability OBB-2820092

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Report Claims Coinbase Selling User Geolocation Data to ICE

By Deeba Ahmed Tech Inquiry’s Jack Paulson has shared startling details about a 3-year contract between the US Department of Homeland… This is a post from HackRead.com Read the original post: Report Claims Coinbase Selling User Geolocation Data to ICE...

GSD-2022-1004080 ALSA: jack: Access input_dev under mutex

ALSA: jack: Access inputdev under mutex This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.318 by commit...

GSD-2022-1004000 ALSA: jack: Access input_dev under mutex

ALSA: jack: Access inputdev under mutex This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.283 by commit...

GSD-2022-1003904 ALSA: jack: Access input_dev under mutex

ALSA: jack: Access inputdev under mutex This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.247 by commit...

GSD-2022-1003789 ALSA: jack: Access input_dev under mutex

ALSA: jack: Access inputdev under mutex This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.198 by commit...

GSD-2022-1003632 ALSA: jack: Access input_dev under mutex

ALSA: jack: Access inputdev under mutex This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.121 by commit...

GSD-2022-1003404 ALSA: jack: Access input_dev under mutex

ALSA: jack: Access inputdev under mutex This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.46 by commit...

GSD-2022-1003155 ALSA: jack: Access input_dev under mutex

ALSA: jack: Access inputdev under mutex This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.14 by commit...

GSD-2022-1002841 ALSA: jack: Access input_dev under mutex

ALSA: jack: Access inputdev under mutex This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...

PT-2022-32052

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.198 Description The issue is related to the ALSA: jack, where access to input dev is done under a mutex. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-32263

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.283 Description The issue is related to the ALSA jack accessing input dev under a mutex. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior t...

PT-2022-31667

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.46 Description The issue is related to accessing input dev under a mutex in the ALSA jack component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-31895

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.121 Description The issue is related to accessing input dev under a mutex in the ALSA jack component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-31418

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.14 Description The issue is related to the ALSA jack, where access to input dev occurs under a mutex. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-31104

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.3 Description The issue concerns access to input dev under a mutex in the ALSA jack component. The actual impact and potential for attack have not been fully determined. Recommendations For Linux Kernel...

PT-2022-32167

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.247 Description The issue is related to the ALSA jack, where access to input dev occurs under a mutex. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-32343

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.318 Description The issue is related to accessing input dev under a mutex in the ALSA jack component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

Debian DSA-5165-1 : vlc - security update

The remote Debian 10 / 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5165 advisory. Multiple vulnerabilities were discovered in the VLC media player, which could result in the execution of arbitrary code or denial of service if a malformed file is...