Malicious code in bookingcom-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6cc8ed36dec16e2f62b3d8b194b72fc8ae1702f19cd3f9bdb9ff1de3ab7d02b9 The OpenSSF Package Analysis project identified 'bookingcom-sync' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-407 Malicious code in bookingcom-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6cc8ed36dec16e2f62b3d8b194b72fc8ae1702f19cd3f9bdb9ff1de3ab7d02b9 The OpenSSF Package Analysis project identified 'bookingcom-sync' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in coinbase-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e6b9af30ce8eff229a63be6c3023ee9eae0d2049c07a5f214b91746c58a5865e The OpenSSF Package Analysis project identified 'coinbase-sync' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-424 Malicious code in coinbase-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e6b9af30ce8eff229a63be6c3023ee9eae0d2049c07a5f214b91746c58a5865e The OpenSSF Package Analysis project identified 'coinbase-sync' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

CVE-2025-23486

Missing Authorization vulnerability in tamlyn Database Sync database-sync allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Database Sync: from n/a through = 0.5.1...

CVE-2025-23486 WordPress Database Sync plugin <= 0.5.1 - Sensitive Data Exposure vulnerability

Missing Authorization vulnerability in NotFound Database Sync allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Database Sync: from n/a through 0.5.1...

CVE-2025-23486 WordPress Database Sync plugin <= 0.5.1 - Sensitive Data Exposure vulnerability

Missing Authorization vulnerability in tamlyn Database Sync database-sync allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Database Sync: from n/a through = 0.5.1...

CVE-2025-23486

CVE-2025-23486 references a Missing Authorization vulnerability in the WordPress plugin Database Sync (affected: up to version 0.5.1). The issue is described as an authenticated sensitive information exposure resulting from insufficient access control on Database Sync, enabling an attacker with s...

kernel: i40e: fix race condition by adding filter's intermediate sync state

In the Linux kernel, the following vulnerability has been resolved: i40e: fix race condition by adding filter's intermediate sync state Fix a race condition in the i40e driver that leads to MAC/VLAN filters becoming corrupted and leaking. Address the issue that occurs under heavy load when multip...

WordPress plugin Database Sync 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

The vulnerability of the xe_exec_ioctl() function in the drivers/gpu/drm/xe/xe_exec.c module of the Intel Xe graphics driver for the Linux operating system allows a attacker to compromise the accessibility of protected information.

The vulnerability of the xeexecioctl function in the drivers/gpu/drm/xe/xeexec.c file of the Intel Xe graphics driver for the Linux operating system is related to a violation of the synchronization mechanism. Exploiting this vulnerability could allow an attacker to compromise the accessibility of...

CVE-2025-23778

Missing Authorization vulnerability in Pravin Durugkar User Sync ActiveCampaign registered-user-sync-activecampaign allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Sync ActiveCampaign: from n/a through = 1.3.2...

CVE-2025-23778 WordPress User Sync ActiveCampaign plugin <= 1.3.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in Pravin Durugkar User Sync ActiveCampaign registered-user-sync-activecampaign allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Sync ActiveCampaign: from n/a through = 1.3.2...

WordPress User Sync ActiveCampaign plugin <= 1.3.2 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Mika in WordPress Plugin User Sync ActiveCampaign versions = 1.3.2...

WordPress Database Sync plugin <= 0.5.1 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Mika in WordPress Plugin Database Sync versions = 0.5.1...

WordPress plugin User Sync ActiveCampaign 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

PT-2025-5084 · Unknown · Pravin Durugkar User Sync Activecampaign

Name of the Vulnerable Software and Affected Versions: Pravin Durugkar User Sync ActiveCampaign versions 1.3.2 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: Fo...

CVE-2024-36258

A stack-based buffer overflow vulnerability exists in the touchlistsync.cgi touchlistsync functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2024-34166

An os command injection vulnerability exists in the touchlistsync.cgi touchlistsync functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted set of HTTP requests can lead to arbitrary code execution. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2024-50051

In the Linux kernel, the following vulnerability has been resolved: spi: mpc52xx: Add cancelworksync before module remove If we remove the module which will call mpc52xxspiremove it will free 'ms' through spiunregistercontroller. while the work ms-work will be used. The sequence of operations tha...