CVE-2025-59528-POC

CVE-2025-59528 - Удаленное выполнение кода в FlowiseAI CustomMCP CVSS 10.0 Критический | Слепое RCE | FlowiseAI Flowise = 2.2.7-patch.1 и 3.0.6 Обзор Критическая уязвимость удаленного выполнения кода в узле CustomMCP проекта FlowiseAI Flowise. Функция convertToValidJSONString передает...

Unihackers---CVE-2025-55182-

ITALIAN GANG React2Shell PoC Этот репозиторий предоставляет минимальное, намеренно уязвимое окружение для проверки сканеров безопасности на предмет недавней критической RCE-уязвимости React2Shell, затрагивающей React Server Components и Next.js. CVE-2025-55182 : Уязвимость удаленного выполнения...

CVE-2025-59528

CVE-2025-59528 – Выполнение кода в узле CustomMCP Flowise PoC Обзор Этот репозиторий содержит proof of concept, демонстрирующий CVE-2025-59528 в Flowise v3.0.5. Уязвимость существует в узле customMCP, где вводимые пользователем данные mcpServerConfig обрабатываются таким образом, что приводит к...

PT-2026-85312

Missing authentication for critical function in Azure AI Language allows an unauthorized attacker to elevate privileges over a network...

CVE-2025-44137

CVE-2025-44137 MapTiler Tileserver-php v2.0에서 발생하는 인증되지 않은 파일 읽기 설명 MapTiler Tileserver-php v2.0은 디렉터리 트래버설Directory Traversal에 취약합니다. tileserver.php 내의 renderTile 함수는 서버에 파일로 저장된 타일을 웹 요청을 통해 전달하는 역할을 합니다. 파일 경로를 생성할 때 '../'의 사용이 가능하며, 이를 활용하여 웹 서버의 모든 파일을 읽을 수 있습니다. 영향을 받는 GET 매개변수는 "TileMatrix...

CVE-2026-26832

CVE-2026-26832: внедрение команд ОС в node-tesseract-ocr Сводка node-tesseract-ocr вплоть до версии 2.2.1 позволяет внедрение команд ОС в функции recognize в src/index.js. Пакет формирует строку shell-команды и выполняет её с помощью childprocess.exec. Поскольку путь к входному файлу лишь...

CTT-Vsyslog-Vortex-CVE-2023-6246

CTT-Vsyslog-Vortex-CVE-2023-6246 CVE-2023-6246 glibc vsysloginternal эксплуатация переполнения кучи с использованием Convergent Time Theory α = 0.0302011. 33-слойный временной heap spray + фазово-синхронизированный триггер для надежного локального повышения привилегий. README.md root@kitploit:...

CVE-2026-26833

CVE-2026-26833: внедрение команд ОС в thumbler Сводка thumbler вплоть до версии 1.1.2 позволяет внедрение команд ОС в thumbnail в lib/thumbler.js. Пакет объединяет значения input, output, time и size в одну строку команды ffmpeg и выполняет эту строку через childprocess.exec. Злоумышленник,...

deephas-1.0.7-Prototype-Pollution-PoC-CVE-2026-25047-

deephas = 1.0.7 – Prototype Pollution PoC CVE-2026-25047 Exploit Title: deephas = 1.0.7 - Prototype Pollution leading to Arbitrary Code Execution / DoS CVE: CVE-2026-25047 GHSA: GHSA-2733-6c58-pf27 CVSS: 9.8 Critical Author: Mohammed Idrees Banyamer Author Country: Jordan Contact: Instagram...

CVE-2026-84886

A resource consumption vulnerability affects the OCR HTTP API component of simular-ai Agent-S versions up to 0.3.2. The flaw resides in the ImageData function within the file gui_agents/s1/utils/ocr_server.py, where manipulation of the img_bytes argument can exhaust system resources. The attack i...

net/mail: golang: net/mail: Denial of Service via pathological email address parsing

A flaw was found in the net/mail package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the consumePhrase function, it can lead to excessive resource consumption due to quadratic...

CVE-2026-84852 Reader Tools PDF Reader App File ActSplashNew.handleDeeplink path traversal

A security vulnerability has been detected in Reader Tools PDF Reader App 98.8 on Android. The affected element is the function ActSplashNew.handleDeeplink of the component File Handler. The manipulation of the argument displayname leads to path traversal. An attack has to be approached locally...

CVE-2026-4800-POC

CVE-2026-4800-POC Консультация по безопасности https://github.com/lodash/lodash/security/advisories/GHSA-r5fr-rjxr-66jc POC root@kitploit: const = require'lodash'; Object.prototype.imports = 'x=process.getBuiltinModule"childprocess".execSync"curl https://example.com"':undefined .template'', ;...

net/mail: golang: Go net/mail: Denial of Service via crafted email inputs

A flaw was found in the net/mail package of the Go programming language. An attacker could provide specially crafted inputs to the ParseAddress, ParseAddressList, or ParseDate functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service DoS for...

net/mail: golang: net/mail: Denial of Service via pathological email address parsing

A flaw was found in the net/mail package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the consumePhrase function, it can lead to excessive resource consumption due to quadratic...

CVE-2026-79755 Nuclio: Unauthenticated OS command injection via function namespace in docker ps --filter label (local Docker platform)

Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.17.4, on the Nuclio local Docker platform, the function namespace is interpolated—unvalidated—into a double-quoted docker ps --filter "label=nuclio.io/namespace=" command that is executed via the host...

CVE-2026-79755 Nuclio: Unauthenticated OS command injection via function namespace in docker ps --filter label (local Docker platform)

Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.17.4, on the Nuclio local Docker platform, the function namespace is interpolated—unvalidated—into a double-quoted docker ps --filter "label=nuclio.io/namespace=" command that is executed via the host...

EUVD-2026-70215

Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.16.5, Nuclio Dashboard exposes POST /api/functions without authentication by default NOP auth mode. The spec.handler field e.g., mymodule:myfunction is parsed by functionconfig.ParseHandler which split...

CVE-2026-82404 TOON: Prototype pollution when decoding untrusted TOON input

TOON is a compact, human-readable serialization of JSON data for LLM prompts. Prior to 2.3.1, decoding attacker-controlled TOON with a proto, constructor, or prototype key wrote through the object prototype chain instead of creating an own property, polluting Object.prototype for the runtime. In...

GHSA-JQFF-G426-HQXP fast-uri vulnerable to host confusion via percent-encoded scheme normalization

Impact fast-uri decodes percent-encoded characters in the scheme component with the legacy global unescape and serializes the result back as raw characters, without re-escaping it or validating it as a scheme. A scheme that decodes to characters outside the RFC 3986 scheme grammar can therefore...