spinmasterstudios.com Cross Site Scripting vulnerability OBB-3319939

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2025-49490

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.1.17-mainline-android14-2-g277223301adb Description The Linux kernel contained a deadlock issue within the UFS Universal Flash Storage subsystem related to the management of command queues MCQ. Specifically, a...

GHSA-2QV5-7MW5-J3CG spin-rs initialisation failure in `Once::try_call_once` can lead to undefined behaviour for other initialisers

Once::trycallonce is unsound if invoked more than once concurrently and any call fails to initialise successfully...

spin-rs initialisation failure in `Once::try_call_once` can lead to undefined behaviour for other initialisers

Once::trycallonce is unsound if invoked more than once concurrently and any call fails to initialise successfully...

SUSE CVE-2006-7229

The skge driver 1.5 in Linux kernel 2.6.15 on Ubuntu does not properly use the spinlock and spinunlock functions, which allows remote attackers to cause a denial of service machine crash via a flood of network traffic...

SUSE CVE-2008-0314

Heap-based buffer overflow in spin.c in libclamav in ClamAV 0.92.1 allows remote attackers to execute arbitrary code via a crafted PeSpin packed PE binary with a modified length value...

SUSE CVE-2019-16137

An issue was discovered in the spin crate before 0.5.2 for Rust, when RwLock is used. Because memory ordering is mishandled, two writers can acquire the lock at the same time, violating mutual exclusion...

SUSE CVE-2020-9494

Apache Traffic Server 6.0.0 to 6.2.3, 7.0.0 to 7.1.10, and 8.0.0 to 8.0.7 is vulnerable to certain types of HTTP/2 HEADERS frames that can cause the server to allocate a large amount of memory and spin the thread...

SUSE CVE-2021-28692

inappropriate x86 IOMMU timeout detection / handling IOMMUs process commands issued to them in parallel with the operation of the CPUs issuing such commands. In the current implementation in Xen, asynchronous notification of the completion of such commands is not used. Instead, the issuing CPU...

PT-2022-7702

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the simultaneous execution of commands using a shared resource with incorrect synchronization in the Linux kernel's drm/vmwgfx component. This can lead to a crash...

kernel: PM: core: keep irq flags in device_pm_check_callbacks()

In the Linux kernel, the following vulnerability has been resolved: PM: core: keep irq flags in devicepmcheckcallbacks The function devicepmcheckcallbacks can be called under the spin lock in the reported case it happens from genpdadddevice - devpmdomainset, when the genpd uses spinlocks rather...

kernel: PM: core: keep irq flags in device_pm_check_callbacks()

In the Linux kernel, the following vulnerability has been resolved: PM: core: keep irq flags in devicepmcheckcallbacks The function devicepmcheckcallbacks can be called under the spin lock in the reported case it happens from genpdadddevice - devpmdomainset, when the genpd uses spinlocks rather...

PT-2025-26053

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, specifically in the RDMA/rxe component. The issue occurs in the rxe create qp function, where an error can happen before the spin...

PT-2025-8256

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.17.1-rt17+ Description A issue in the Linux kernel has been identified where a sleeping function is called from an invalid context on RT kernel. This occurs when setting specific boot parameters, including "tra...

PT-2022-30062

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description The issue is related to the use of spin lock in f2fs, which could potentially lead to a hang. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-29740

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.19 Description The issue is related to the use of spin lock in f2fs, which could potentially lead to a hang. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-29423

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.2 Description The issue is related to the use of spin lock in f2fs, which could potentially lead to a hang. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kern...

PT-2025-8249

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A deadlock issue exists in the Linux kernel, specifically in the rtllib beacons stop function. This occurs when two threads attempt to access the ieee-beacon lock simultaneously, causing...

PT-2025-8239

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A deadlock issue exists in the Linux kernel, specifically in the ieee80211 beacons stop function. This occurs when two threads attempt to access the ieee-beacon lock simultaneously,...

WordPress Lucky Wheel for WooCommerce – Spin a Sale plugin <= 1.0.10 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered in WordPress Lucky Wheel for WooCommerce – Spin a Sale plugin versions = 1.0.10. Solution Update the WordPress Lucky Wheel for WooCommerce – Spin a Sale plugin to the latest available version at least 1.0.11...