CVE-2022-49086 net: openvswitch: fix leak of nested actions

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix leak of nested actions While parsing user-provided actions, openvswitch module may dynamically allocate memory and store pointers in the internal copy of the actions. So this memory has to be freed while...

CVE-2022-49086

CVE-2022-49086 affects the Linux kernel Open vSwitch actions: during parsing user-provided actions, the ovs_openvswitch module can allocate memory and leak it when destroying actions due to nested actions not being freed. The root cause is that several actions can hold nested lists of actions and...

CVE-2022-49086

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix leak of nested actions While parsing user-provided actions, openvswitch module may dynamically allocate memory and store pointers in the internal copy of the actions. So this memory has to be freed while...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from blk-throttle not setting the BIOTHROTTLED flag correctly after a bio has been flow-limited, which could lead...

CVE-2022-49358: Missing Release of Memory after Effective Lifetime

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: memleak flow rule from commit path Abort path release flow rule object, however, commit path does not. Update code to destroy these objects before releasing the transaction...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a memory leak in the nftables module that fails to free a flow rule object in the commit path...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from CFI not properly handling RCU state in the cpuidle path...

CVE-2025-26868

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in fastflow Fast Flow fast-flow-dashboard allows Reflected XSS.This issue affects Fast Flow: from n/a through = 1.2.16...

CVE-2025-26868 WordPress Fast Flow plugin <= 1.2.16 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in fastflow Fast Flow fast-flow-dashboard allows Reflected XSS.This issue affects Fast Flow: from n/a through = 1.2.16...

CVE-2025-26868 WordPress Fast Flow plugin <= 1.2.16 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in fastflow Fast Flow fast-flow-dashboard allows Reflected XSS.This issue affects Fast Flow: from n/a through = 1.2.16...

CVE-2025-26868

CVE-2025-26868 refers to a reflected XSS in the WordPress plugin Fast Flow (Fast Flow). Connected sources confirm the flaw is caused by improper neutralization of input during web page generation, enabling reflected cross-site scripting. Affected are Fast Flow versions up to 1.2.16. The vulnerabi...

CVE-2025-26868: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in fastflow Fast Flow fast-flow-dashboard allows Reflected XSS.This issue affects Fast Flow: from n/a through = 1.2.16...

WordPress plugin Fast Flow has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2025-7829 · Fast Flow · Fast Flow

Name of the Vulnerable Software and Affected Versions: Fast Flow versions 1.2.16 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Reflected XSS attacks. Recommendations: For versions...

PT-2025-8701

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description A crash issue was identified, characterized as an UNKNOWN WRITE crash type. The crash occurred in the ndpi free flow data function, within the fuzz process packet.c file. No information is...

MAL-2025-1552 Malicious code in flow-inflation-client (npm)

This package runs commands on import that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9e8b85d87e86c398459dbc07b5a2b235efca84f069f6656c40462a7c7783c7e2 Any computer that has this package installed or running...

Malicious code in flow-inflation-client (npm)

This package runs commands on import that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9e8b85d87e86c398459dbc07b5a2b235efca84f069f6656c40462a7c7783c7e2 Any computer that has this package installed or running...

PT-2025-8700 · Git +1 · Ndpi

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A crash occurred due to a check failure. The crash state includes CheckUnwind, ndpi free flow data, and is located in the fuzz process packet.c file. Recommendations: At the moment, there is...

WordPress Fast Flow plugin <= 1.2.16 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Abdi Pranata Patchstack Alliance in WordPress Plugin Fast Flow versions = 1.2.16...

OSV-2025-147 UNKNOWN WRITE in ndpi_free_flow_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=397731142 Crash type: UNKNOWN WRITE Crash state: ndpifreeflowdata ndpiflowfree processndpicollectedinfo...