CVE-2026-0678 Shipping Rates by City for WooCommerce <= 1.0.3 - Authenticated (Shop Manager+) SQL Injection via 'cities' Parameter

The Flat Shipping Rate by City for WooCommerce plugin for WordPress is vulnerable to time-based SQL Injection via the 'cities' parameter in all versions up to, and including, 1.0.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL...

WordPress plugin Flat Shipping Rate by City for WooCommerce SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A SQL injection vulnerability exists in the WordPress Flat Shipping Rate by City for WooCommerce plugin, which stems from insufficient cleaning and escaping of the cities...

CVE-2009-4802

SQL injection vulnerability in the Flat Manager flatmgr extension before 1.9.16 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2024-2459

The UX Flat plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'button' shortcode in all versions up to, and including, 4.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers wi...

The vulnerability of the HTTP GET Request Handler component in the /app/sae/design/desktop/flat file of the software for developing mobile applications in SiberianCMS allows a attacker to perform XSS attacks.

The vulnerability of the HTTP GET Request Handler component in the /app/sae/design/desktop/flat file of the software for developing mobile applications in SiberianCMS is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor ...

UBUNTU-CVE-2025-40245

In the Linux kernel, the following vulnerability has been resolved: nios2: ensure that memblock.currentlimit is set when setting pfn limits On nios2, with CONFIGFLATMEM set, the kernel relies on memblockgetcurrentlimit to determine the limits of memmap, in particular for maxlowpfn. Unfortunately,...

CVE-2025-40245 nios2: ensure that memblock.current_limit is set when setting pfn limits

In the Linux kernel, the following vulnerability has been resolved: nios2: ensure that memblock.currentlimit is set when setting pfn limits On nios2, with CONFIGFLATMEM set, the kernel relies on memblockgetcurrentlimit to determine the limits of memmap, in particular for maxlowpfn. Unfortunately,...

EUVD-2025-201214

In the Linux kernel, the following vulnerability has been resolved: nios2: ensure that memblock.currentlimit is set when setting pfn limits On nios2, with CONFIGFLATMEM set, the kernel relies on memblockgetcurrentlimit to determine the limits of memmap, in particular for maxlowpfn. Unfortunately,...

CVE-2025-40245 nios2: ensure that memblock.current_limit is set when setting pfn limits

In the Linux kernel, the following vulnerability has been resolved: nios2: ensure that memblock.currentlimit is set when setting pfn limits On nios2, with CONFIGFLATMEM set, the kernel relies on memblockgetcurrentlimit to determine the limits of memmap, in particular for maxlowpfn. Unfortunately,...

CVE-2025-40245

CVE-2025-40245 affects the Linux kernel on the Nios II platform with CONFIG_FLATMEM. The issue is that memblock.current_limit may not be properly initialized during pfn limit setup, allowing max_low_pfn to exceed max_pfn and risk kernel paging failures or a kernel panic. The fix pre-calculates me...

MAL-2025-138723 Malicious code in flat-blush-loon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa17a2d6e43e30cb93591bb47c070f86ead0220b1efefdf057f8ae719f0f0612 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-117379

Malicious code in flat-blush-loon npm...

EUVD-2025-91828

Malicious code in flatelkz3n npm...

EUVD-2025-74641

Malicious code in flatbearmaroon-97 npm...

EUVD-2025-79219

Malicious code in flatunicornz3n npm...

EUVD-2025-81893

Malicious code in flathalibut0xrequest npm...

EUVD-2025-81892

Malicious code in flatmink0xrequest npm...

EUVD-2025-70347

Malicious code in flatpartridgez3n npm...

EUVD-2025-54291

Malicious code in flat-plum-mandrill npm...

Grav CMS 安全漏洞

Grav CMS is a modern, lightweight content management system CMS with a file-driven architecture that runs without relying on traditional databases. Grav CMS suffers from a cross-site scripting vulnerability that stems from the application's lack of effective filtering and escaping of user-supplie...