CVE-2011-4705

The Ming Blacklist Free vc.software.blacklist application 1.8.1 and 1.9.2.1 for Android does not properly protect data, which allows remote attackers to read or modify blacklists and a contact list via a crafted application that launches a "data-flow attack."...

CVE-2019-6669

On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.5.1-11.6.5.1, undisclosed traffic flow may cause TMM to restart under some circumstances...

CVE-2025-4866

A vulnerability was found in weibocom rill-flow 0.1.18. It has been classified as critical. Affected is an unknown function of the component Management Console. The manipulation leads to code injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and...

Insufficient Control Flow Management

Vyper is vulnerable to Insufficient Control Flow Management. The vulnerability is due to the Vyper compiler skipping evaluation of the start argument in the slice function when length is 0 and the source is a special location like msg.data or .code, allows an attacker to suppress execution of...

Insufficient Control Flow Management

Vyper is vulnerable to Insufficient Control Flow Management. The vulnerability is due to a fastpath optimization in the concat function that skips evaluating argument expressions when their length is zero, allowing the omission of side effects and potentially leading to unintended logic behavior ...

CVE-2025-48146

Cross-Site Request Forgery CSRF vulnerability in Michael Lups SEO Flow by LupsOnline lupsonline-link-netwerk allows Stored XSS.This issue affects SEO Flow by LupsOnline: from n/a through = 2.2.1...

Arbitrary Code Injection

Overview Affected versions of this package are vulnerable to Arbitrary Code Injection through the Management Console. An attacker can execute arbitrary code by injecting malicious input into the console. Remediation There is no fixed version for com.weibo:rill-flow. References - GitHub Issue...

CVE-2025-4866

A vulnerability was found in weibocom rill-flow 0.1.18. It has been classified as critical. Affected is an unknown function of the component Management Console. The manipulation leads to code injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and...

CVE-2025-4866 weibocom rill-flow Management Console code injection

A vulnerability was found in weibocom rill-flow 0.1.18. It has been classified as critical. Affected is an unknown function of the component Management Console. The manipulation leads to code injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and...

CVE-2025-4866

CVE-2025-4866 affects weibocom rill-flow 0.1.18, with the vulnerability rooted in the Management Console component enabling code injection. The issue is exploitable remotely and has been publicly disclosed. Multiple sources corroborate a high/severe impact profile (remote code execution potential...

PT-2025-21837 · Unknown · Weibocom Rill-Flow

Name of the Vulnerable Software and Affected Versions: weibocom rill-flow version 0.1.18 Description: A critical issue has been found, affecting an unknown function of the Management Console component. This issue leads to code injection and can be exploited remotely. The exploit has been disclose...

Rill Flow 注入漏洞

Rill Flow is a high-performance, scalable workflow orchestration engine open-sourced by Weibo R&D Open Source Projects for distributed workloads and LLM. An injection vulnerability exists in Rill Flow version 0.1.18, which stems from code injection in the component Management Console...

CVE-2025-48146

Cross-Site Request Forgery CSRF vulnerability in Michael Lups SEO Flow by LupsOnline lupsonline-link-netwerk allows Stored XSS.This issue affects SEO Flow by LupsOnline: from n/a through = 2.2.1...

CVE-2025-48146

Cross-Site Request Forgery CSRF vulnerability in Michael Lups SEO Flow by LupsOnline allows Stored XSS. This issue affects SEO Flow by LupsOnline: from n/a through 2.2.0...

CVE-2025-48146 WordPress SEO Flow by LupsOnline plugin <= 2.2.0 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Michael Lups SEO Flow by LupsOnline allows Stored XSS. This issue affects SEO Flow by LupsOnline: from n/a through 2.2.0...

CVE-2025-48146

CVE-2025-48146 covers a CSRF-to-Stored XSS vulnerability in the WordPress plugin SEO Flow by LupsOnline. The vulnerability affects SEO Flow by LupsOnline versions n/a through 2.2.0, allowing an attacker to trick a logged-in user into performing actions that result in stored malicious script execu...

Insufficient Control Flow Management

Overview vyper is a Pythonic Smart Contract Language for the EVM. Affected versions of this package are vulnerable to Insufficient Control Flow Management through the slice function. An attacker can bypass the evaluation of side effects in the start argument when the length argument is set to 0,...

Insufficient Control Flow Management

Overview vyper is a Pythonic Smart Contract Language for the EVM. Affected versions of this package are vulnerable to Insufficient Control Flow Management through optimization in the concat function. An attacker can skip evaluation of side effects when the length of an argument provided to the...

WordPress SEO Flow by LupsOnline plugin <= 2.2.1 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin SEO Flow by LupsOnline versions = 2.2.1...

MAL-2025-3890 Malicious code in flow-plugins (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8cf17ab0e3206656aa1196545f14592f01b8a02353963e6c158dbb80af69dc75 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...