306 matches found
The vulnerability of the ramoops_init_przs() function in the fs/pstore/ram.c module, which supports the Linux kernel’s persistent storage mechanism, allows a hacker to cause a service failure.
The vulnerability of the ramoopsinitprzs function in the fs/pstore/ram.c module, which supports the Linux kernel’s persistent storage mechanism, is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability could allow an attacker to cause a service...
The vulnerability of the nft_netdev_event() function in the net/netfilter/nft_chain_filter.c module of the netfilter component of the Linux operating system allows a attacker to cause a service failure.
The vulnerability of the nftnetdevevent function in the net/netfilter/nftchainfilter.c module of the netfilter component of the Linux operating system is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability could allow a attacker to cause service...
The vulnerability of the isotp_sendmsg() function in the net/can/isotp.c module of the Linux kernel’s CAN subsystem allows a hacker to cause a service failure.
The vulnerability of the isotpsendmsg function in the net/can/isotp.c module of the CAN subsystem of the Linux kernel is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the mm_ksm_zero_pages() function in the include/linux/ksm.h module of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the mmksmzeropages function in the include/linux/ksm.h module of the Linux operating system’s kernel is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability could allow a malicious actor to cause a service failure...
The vulnerability of the walk_systemRamResRev() function in the kernel/resource.c module of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the walksystemRamResRev function in the kernel/resource.c module of the Linux operating system is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the build_tree() function in the drivers/firewire/core-topology.c file of the Linux operating system’s FireWire support driver allows a hacker to cause a service failure.
The vulnerability of the buildtree function in the drivers/firewire/core-topology.c file of the Linux kernel’s FireWire support driver is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the pmc_core_ssram_get_pmc() function in the driver/platform/x86/intel/pmc/core_ssram.c file of the Linux kernel driver software allows a attacker to cause a system failure.
The vulnerability of the pmccoressramgetpmc function in the driver/platform/x86/intel/pmc/coressram.c file of the Linux kernel driver is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability could allow an attacker to cause a system failure...
Resource Injection
Overview @evershop/evershop is a The React Ecommerce platform. Built with React and Postgres. Open-source and free. Fast and customizable. Affected versions of this package are vulnerable to Resource Injection via the use of getOrdersBaseQuery in Order.resolvers.js. An attacker can access...
CVE-2025-12919 EverShop Order Order.resolvers.js resource injection
A vulnerability was detected in EverShop up to 2.0.1. Affected is an unknown function of the file /src/modules/oms/graphql/types/Order/Order.resolvers.js of the component Order Handler. The manipulation of the argument uuid results in improper control of resource identifiers. The attack may be...
CVE-2025-12919
Summary: CVE-2025-12919 affects EverShop up to 2.0.1, specifically the function in /src/modules/oms/graphql/types/Order/Order.resolvers.js within the Order Handler. The vulnerability stems from manipulation of the uuid argument, causing improper control of resource identifiers and enabling a remo...
CVE-2025-12919 EverShop Order Order.resolvers.js resource injection
A vulnerability was detected in EverShop up to 2.0.1. Affected is an unknown function of the file /src/modules/oms/graphql/types/Order/Order.resolvers.js of the component Order Handler. The manipulation of the argument uuid results in improper control of resource identifiers. The attack may be...
Resource Injection
Overview yungifez/skuul is an A multi school management system. Affected versions of this package are vulnerable to Resource Injection via the invoiceid parameter in the /dashboard/fees/fee-invoices/. A user can access unauthorized resources by manipulating this parameter remotely. Remediation...
CVE-2025-12918 yungifez Skuul School Management System View Fee Invoice fee-invoices resource injection
A security flaw has been discovered in yungifez Skuul School Management System up to 2.6.5. The impacted element is an unknown function of the file /dashboard/fees/fee-invoices/ of the component View Fee Invoice. Performing manipulation of the argument invoiceid results in improper control of...
The vulnerability of the transport_init_se_cmd() function in the drivers/target/target_core_transport.c module of the Linux operating system allows a attacker to cause a service failure.
The vulnerability of the transportinitsecmd function in the drivers/target/targetcoretransport.c module of the Linux kernel is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability could allow an attacker to trigger a service failure...
The vulnerability of the nfs_pageio_doio() function in the fs/nfs/pagelist.c module of the Linux file system support module allows a hacker to cause a service failure.
The vulnerability of the nfspageiodoio function in the fs/nfs/pagelist.c module of the Linux file system support module is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability could allow an attacker to cause service failures...
The vulnerability of the nfs_pageio_do_add_request() function in the fs/nfs/pagelist.c module of the Linux file system support module allows a hacker to cause a service failure.
The vulnerability of the nfspageiodoaddrequest function in the fs/nfs/pagelist.c module of the Linux file system support module is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability could allow an attacker to cause service failures...
The vulnerability of the dasd_diag_setup_blk_queue() function in the drivers/s390/block/dasd_diag.c module of the Linux operating system allows a attacker to cause a service failure.
The vulnerability of the dasddiagsetupblkqueue function in the drivers/s390/block/dasddiag.c module of the Linux operating system is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability could allow an attacker to cause a service failure...
Vulnerability of the advk_pcie_wait_pio() function in the drivers/pci/host/pci-aardvark.c module – This driver is a Linux kernel support driver for PCI devices, which allows an attacker to cause a service failure.
Vulnerability of the advkpciewaitpio function in the drivers/pci/host/pci-aardvark.c module – The Linux system’s PCI core device driver has a vulnerability related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability could allow an attacker to cause...
CVE-2025-12270 LearnHouse Student Assignment Submission sub_file resource injection
A vulnerability was determined in LearnHouse up to 98dfad76aad70711a8113f6c1fdabfccf10509ca. The impacted element is an unknown function of the file /api/v1/assignments/assignmentid/tasks/taskid/subfile of the component Student Assignment Submission Handler. This manipulation causes improper...
