PT-2025-20511

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A issue in the Linux kernel has been identified where the task management thread accesses an invalid queue ID, set by the reset thread, which points to unallocated memory, causing a cras...

WordPress Woocommerce osCommerce Sync plugin <= 2.0.20 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by 0xd4rk5id3 in WordPress Plugin Woocommerce osCommerce Sync versions = 2.0.20...

Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync

...

MAL-2025-564 Malicious code in meli-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 793bfcfb95a79b8cd268833db69c5dc0bc95766ce7acef8947614e19d8e27afc The OpenSSF Package Analysis project identified 'meli-sync' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in meli-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 793bfcfb95a79b8cd268833db69c5dc0bc95766ce7acef8947614e19d8e27afc The OpenSSF Package Analysis project identified 'meli-sync' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in lyft-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bad08278af65d859072402dbc935300d4c8d6036f2f214644533c0af1b8f7b8e The OpenSSF Package Analysis project identified 'lyft-sync' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-539 Malicious code in lyft-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bad08278af65d859072402dbc935300d4c8d6036f2f214644533c0af1b8f7b8e The OpenSSF Package Analysis project identified 'lyft-sync' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in iberia-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3fa775f2b41624be8acd4b8b6be1dc827dc0012574f46c5baf62b0f4aeaa3440 The OpenSSF Package Analysis project identified 'iberia-sync' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-495 Malicious code in iberia-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3fa775f2b41624be8acd4b8b6be1dc827dc0012574f46c5baf62b0f4aeaa3440 The OpenSSF Package Analysis project identified 'iberia-sync' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in godaddy-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b27118be6531dda0274adb6114723c46d2c88efc9b6d648d2046baf78e396e9c The OpenSSF Package Analysis project identified 'godaddy-sync' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-472 Malicious code in godaddy-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b27118be6531dda0274adb6114723c46d2c88efc9b6d648d2046baf78e396e9c The OpenSSF Package Analysis project identified 'godaddy-sync' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in bookingcom-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6cc8ed36dec16e2f62b3d8b194b72fc8ae1702f19cd3f9bdb9ff1de3ab7d02b9 The OpenSSF Package Analysis project identified 'bookingcom-sync' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-407 Malicious code in bookingcom-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6cc8ed36dec16e2f62b3d8b194b72fc8ae1702f19cd3f9bdb9ff1de3ab7d02b9 The OpenSSF Package Analysis project identified 'bookingcom-sync' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in coinbase-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e6b9af30ce8eff229a63be6c3023ee9eae0d2049c07a5f214b91746c58a5865e The OpenSSF Package Analysis project identified 'coinbase-sync' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-424 Malicious code in coinbase-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e6b9af30ce8eff229a63be6c3023ee9eae0d2049c07a5f214b91746c58a5865e The OpenSSF Package Analysis project identified 'coinbase-sync' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

CVE-2025-23486

Missing Authorization vulnerability in tamlyn Database Sync database-sync allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Database Sync: from n/a through = 0.5.1...

CVE-2025-23486 WordPress Database Sync plugin <= 0.5.1 - Sensitive Data Exposure vulnerability

Missing Authorization vulnerability in tamlyn Database Sync database-sync allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Database Sync: from n/a through = 0.5.1...

CVE-2025-23486 WordPress Database Sync plugin <= 0.5.1 - Sensitive Data Exposure vulnerability

Missing Authorization vulnerability in NotFound Database Sync allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Database Sync: from n/a through 0.5.1...

CVE-2025-23486

CVE-2025-23486 references a Missing Authorization vulnerability in the WordPress plugin Database Sync (affected: up to version 0.5.1). The issue is described as an authenticated sensitive information exposure resulting from insufficient access control on Database Sync, enabling an attacker with s...

kernel: i40e: fix race condition by adding filter's intermediate sync state

In the Linux kernel, the following vulnerability has been resolved: i40e: fix race condition by adding filter's intermediate sync state Fix a race condition in the i40e driver that leads to MAC/VLAN filters becoming corrupted and leaking. Address the issue that occurs under heavy load when multip...