logitech-ipc-protocol

logitech-ipc-protocol Logi Options+ 代理 IPC 协议的逆向工程文档。支持在 macOS 和 Windows 上通过程序控制 Logitech 多主机设备（主机切换、设备查询），无需原始 HID 访问。 此协议此前从未被公开记录过。 问题 macOS 在内核层面禁止对蓝牙输入设备的原始 HID 访问。没有权限、授权或黑客手段可以绕过。Logi Options+ 代理拥有苹果签名的授权（com.apple.security.device.bluetooth），从而获得蓝牙 HID 访问权限。本项目通过其 IPC 通道与代理通信。 文件 文件| 描述...

CVE-2026-12518

A local privilege escalation vulnerability in the Logitech Logi Options+ updater service on Windows allows a low-privileged local user to execute arbitrary code as SYSTEM...

EUVD-2026-77318

A local privilege escalation vulnerability in the Logitech Logi Options+ updater service on Windows allows a low-privileged local user to execute arbitrary code as SYSTEM...

CVE-2026-12518 Local privilege escalation in the Logi Options+ updater service on Windows

A local privilege escalation vulnerability in the Logitech Logi Options+ updater service on Windows allows a low-privileged local user to execute arbitrary code as SYSTEM...

CVE-2026-12518

CVE-2026-12518 is a local privilege escalation vulnerability in the Logitech Logi Options+ updater service on Windows . A low-privileged local user can exploit this flaw to execute arbitrary code with SYSTEM privileges, resulting in high impact to confidentiality, integrity, and availability (CVS...

TCLBANKER Banking Trojan Targets Financial Platforms via WhatsApp and Outlook Worms

Threat hunters have flagged a previously undocumented Brazilian banking trojan dubbed TCLBANKER that's capable of targeting 59 banking, fintech, and cryptocurrency platforms. The activity is being tracked by Elastic Security Labs under the moniker REF3076. The malware family is assessed to be a...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002421)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002421 advisory. Array index error in the logidjrawevent function in drivers/hid/hid-logitech-dj.c in the Linux kernel before 3.16.2 allows physically proximate attackers to execute...

CVE-2024-2537

Improper Control of Dynamically-Managed Code Resources vulnerability in Logitech Logi Tune on MacOS allows Local Code Inclusion...

EUVD-2024-27486

Malicious code in bioql PyPI...

07FLY CRM 跨站脚本漏洞

07FLY CRM is an OA office system of China Zero Takeoff 07FLY. A cross-site scripting vulnerability exists in 07FLY CRM version 1.3.8, which originates from the parameter Logi of the component System Settings Page that causes cross-site scripting...

UBUNTU-CVE-2024-40934

In the Linux kernel, the following vulnerability has been resolved: HID: logitech-dj: Fix memory leak in logidjrecvswitchtodjmode Fix a memory leak on logidjrecvsendreport error path...

CVE-2024-2537

CVE-2024-2537 describes an "Improper Control of Dynamically-Managed Code Resources" vulnerability in Logitech Logi Tune for macOS, enabling potential Local Code Inclusion. The issue is associated with the macOS Logi Tune Electron-based flow (as reflected in multiple feeds naming Electron Code Inj...

CVE-2024-2537 Electron Code Injection in Logi Tune macOS Application

Improper Control of Dynamically-Managed Code Resources vulnerability in Logitech Logi Tune on MacOS allows Local Code Inclusion...

CVE-2024-2537 Electron Code Injection in Logi Tune macOS Application

Improper Control of Dynamically-Managed Code Resources vulnerability in Logitech Logi Tune on MacOS allows Local Code Inclusion...

Logitech Logi Tune Security Vulnerability

Logitech Logi Tune is a free desktop application from Logitech Switzerland. It allows users to calibrate headphones or Logi Dock audio. A security vulnerability exists in Logitech Logi Tune that stems from improper control of dynamically managed code resources...

PT-2024-20905 · Logitech · Logitech Logi Tune

Name of the Vulnerable Software and Affected Versions: Logitech Logi Tune affected versions not specified Description: The issue is related to an Improper Control of Dynamically-Managed Code Resources vulnerability, which allows Local Code Inclusion. This vulnerability affects Logitech Logi Tune ...

SUSE CVE-2014-3182

Array index error in the logidjrawevent function in drivers/hid/hid-logitech-dj.c in the Linux kernel before 3.16.2 allows physically proximate attackers to execute arbitrary code or cause a denial of service invalid kfree via a crafted device that provides a malformed REPORTTYPENOTIFDEVICEUNPAIR...

MAL-2022-4379 Malicious code in logi-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b6ddc969c3ee3a92a778090198117b0c40386a5c6268f77e3a5c26869905989 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in logi-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b6ddc969c3ee3a92a778090198117b0c40386a5c6268f77e3a5c26869905989 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Calavera UpLoader 3.5 - (FTP Logi) Denial of Service (PoC + SEH Overwrite) Exploit

Exploit Title: Calavera UpLoader 3.5 - 'FTP Logi' Denial of Service PoC + SEH Overwrite Author: Felipe Winsnes Software Link: https://www.exploit-db.com/apps/463c9e7fe9a39888d3c01bc9ad756bba-UpSetup.exe Version: 3.5 Tested on: Windows 7 x86 Blog: https://whitecr0wz.github.io/ Sadly enough, this...