The vulnerability of the cmaCancelOperation() function in the drivers/infiniband/core/cma.c module of the Linux operating system’s InfiniBand support driver allows a malicious actor to trigger a service failure.

The vulnerability of the cmaCancelOperation function in the drivers/infiniband/core/cma.c module of the Linux operating system’s InfiniBand support driver is related to synchronization errors when using shared resources. Exploiting this vulnerability could allow a attacker to cause a service...

EUVD-2025-175322

A weakness has been identified in macrozheng mall-swarm up to 1.0.3. Affected is the function cancelUserOrder of the file /order/cancelUserOrder. Executing manipulation of the argument orderId can lead to improper authorization. It is possible to launch the attack remotely. The exploit has been...

CVE-2025-13117

A security vulnerability has been detected in macrozheng mall-swarm and mall up to 1.0.3. Affected by this vulnerability is the function cancelOrder of the file /order/cancelOrder. The manipulation of the argument orderId leads to improper authorization. The attack can be initiated remotely. The...

CVE-2025-13117

CVE-2025-13117 affects macrozheng mall-swarm up to version 1.0.3, targeting the cancelOrder function in /order/cancelOrder. The issue arises from manipulation of the orderId parameter, causing improper authorization. An attacker can trigger this remotely and public exploitation has been disclosed...

CVE-2025-13116

CVE-2025-13116 affects macrozheng mall-swarm and mall up to 1.0.3. The issue is in the function cancelUserOrder in /order/cancelUserOrder, where manipulating the argument orderId can cause improper authorization. Attacks are described as remotely executable and a public exploit exists. Multiple c...

CVE-2025-13116 macrozheng mall-swarm/mall cancelUserOrder improper authorization

A weakness has been identified in macrozheng mall-swarm and mall up to 1.0.3. Affected is the function cancelUserOrder of the file /order/cancelUserOrder. Executing manipulation of the argument orderId can lead to improper authorization. It is possible to launch the attack remotely. The exploit h...

PT-2025-46829

Name of the Vulnerable Software and Affected Versions macrozheng mall-swarm versions through 1.0.3 Description A flaw exists in macrozheng mall-swarm that could allow for improper authorization. This is due to manipulation of the orderId argument within the cancelUserOrder function located in the...

PT-2025-46830

Name of the Vulnerable Software and Affected Versions macrozheng mall-swarm and mall versions up to 1.0.3 Description A security issue exists due to improper authorization. This occurs through manipulation of the orderId argument within the cancelOrder function located in the file...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-990763)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990763 advisory. In the Linux kernel, the following vulnerability has been resolved: 9p: transfd/p9conncancel: drop client lock earlier syzbot reported a double-lock here and we no...

kernel: wifi: rtw89: fix race between cancel_hw_scan and hw_scan completion

A flaw was found in the linux kernel. A race between cancelhwscan and hwscan completion may lead to compromised availability...

WordPress plugin Hydra Booking — Appointment Scheduling & Booking Calendar 安全特征问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. WordPress plugin Hydra...

PT-2025-49091

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.12.0 Description The Linux kernel contains a flaw within the nvme-fc subsystem. Specifically, the issue arises from improper handling of work queues during the deletion of an NVMe-FC controller association. The...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990580)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990580 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: qat - Fix ADFDEVRESETSYNC memory leak Using completiondone to determine whether the calle...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989464)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989464 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Cancel pending work at closing a MIDI substream At closing a USB MIDI output...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990328)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990328 advisory. In the Linux kernel, the following vulnerability has been resolved: libceph: fix race between delayedwork and cephmoncstop The way the delayed work is handled in...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989335)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989335 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Cancel pending work at closing a MIDI substream At closing a USB MIDI output...

net/9p: fix double req put in p9_fd_cancelled

...

EUVD-2025-36440

In the Linux kernel, the following vulnerability has been resolved: net/9p: fix double req put in p9fdcancelled Syzkaller reports a KASAN issue as below: general protection fault, probably for non-canonical address 0xfbd59c0000000021: 0000 1 PREEMPT SMP KASAN NOPTI KASAN: maybe wild-memory-access...

CVE-2025-40027 net/9p: fix double req put in p9_fd_cancelled

In the Linux kernel, the following vulnerability has been resolved: net/9p: fix double req put in p9fdcancelled Syzkaller reports a KASAN issue as below: general protection fault, probably for non-canonical address 0xfbd59c0000000021: 0000 1 PREEMPT SMP KASAN NOPTI KASAN: maybe wild-memory-access...

Siemens SIMATIC, SCALANCE and RUGGEDCOM Devices Race Condition (CVE-2024-36894)

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: ffs: Fix race between aiocancel and AIO request complete This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc...