CVE-2025-48146 WordPress SEO Flow by LupsOnline plugin <= 2.2.0 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Michael Lups SEO Flow by LupsOnline allows Stored XSS. This issue affects SEO Flow by LupsOnline: from n/a through 2.2.0...

CVE-2025-48146

CVE-2025-48146 covers a CSRF-to-Stored XSS vulnerability in the WordPress plugin SEO Flow by LupsOnline. The vulnerability affects SEO Flow by LupsOnline versions n/a through 2.2.0, allowing an attacker to trick a logged-in user into performing actions that result in stored malicious script execu...

Insufficient Control Flow Management

Overview vyper is a Pythonic Smart Contract Language for the EVM. Affected versions of this package are vulnerable to Insufficient Control Flow Management through the slice function. An attacker can bypass the evaluation of side effects in the start argument when the length argument is set to 0,...

Insufficient Control Flow Management

Overview vyper is a Pythonic Smart Contract Language for the EVM. Affected versions of this package are vulnerable to Insufficient Control Flow Management through optimization in the concat function. An attacker can skip evaluation of side effects when the length of an argument provided to the...

WordPress SEO Flow by LupsOnline plugin <= 2.2.1 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin SEO Flow by LupsOnline versions = 2.2.1...

MAL-2025-3890 Malicious code in flow-plugins (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8cf17ab0e3206656aa1196545f14592f01b8a02353963e6c158dbb80af69dc75 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in flow-plugins (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8cf17ab0e3206656aa1196545f14592f01b8a02353963e6c158dbb80af69dc75 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2025-21737 · Lupsonline · Seo Flow

Name of the Vulnerable Software and Affected Versions: SEO Flow by LupsOnline versions n/a through 2.2.0 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web applicatio...

WordPress plugin SEO Flow by LupsOnline 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

CVE-2025-20004

Insufficient control flow management in the Alias Checking Trusted Module for some IntelR XeonR 6 processor E-Cores firmware may allow a privileged user to potentially enable escalation of privilege via local access...

Fileless Execution: PowerShell Based Shellcode Loader Executes Remcos RAT

Cybercriminals are progressively turning PowerShell to launch stealthy attacks that evade traditional antivirus and endpoint defenses. By running code directly in memory, these threats leave minimal evidence on disk, making them particularly challenging to detect. A recent example is Remcos RAT, ...

MAL-2025-3788 Malicious code in f0-flow-resolver (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c42aceb0889ce5fb0fad4c698354a5a1df80d9432c36717c49a273f233cc9cf2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in f0-flow-resolver (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c42aceb0889ce5fb0fad4c698354a5a1df80d9432c36717c49a273f233cc9cf2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Securing P4 Programs by Information Flow Control

Software-Defined Networking SDN has transformed network architectures by decoupling the control and data-planes, enabling fine-grained control over packet processing and forwarding. P4, a language designed for programming data-plane devices, allows developers to define custom packet processing...

CVE-2025-20022

Insufficient control flow management for some Edge Orchestrator software for IntelR Tiber™ Edge Platform may allow a privileged user to potentially enable information disclosure via adjacent access...

CVE-2025-20004

Insufficient control flow management in the Alias Checking Trusted Module for some IntelR XeonR 6 processor E-Cores firmware may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2025-20022

CVE-2025-20022 affects Intel® Tiber™ Edge Platform Edge Orchestrator (Edge Orchestrator software before 24.11). Root cause: insufficient control flow management in the affected component, enabling a privileged user to potentially disclose information via adjacent access. Impact (as per sources): ...

CVE-2025-20022

Insufficient control flow management for some Edge Orchestrator software for IntelR Tiber™ Edge Platform may allow a privileged user to potentially enable information disclosure via adjacent access...

CVE-2025-20004

CVE-2025-20004 affects Intel Xeon 6 Processor E-Cores firmware through the Alias Checking Trusted Module due to insufficient control-flow management, enabling privilege escalation from local access. Risk context is High (CVSS 3.1/4.0; local access, high privileges). Intel Intel-SA-01273 documents...

CVE-2025-20004

Insufficient control flow management in the Alias Checking Trusted Module for some IntelR XeonR 6 processor E-Cores firmware may allow a privileged user to potentially enable escalation of privilege via local access...