CVE-2026-59528

creationtimestamp| type| source ---|---|--- 2026-07-27 18:02:46+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mrni5sssge26 2026-08-12 10:16:10+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msuvk6bu7g2l...

CVE-2026-59528

Subscriber Sensitive Data Exposure in ShipTime: Discounted Shipping Rates = 1.1.1 versions...

Exploit for Code Injection in Flowiseai Flowise

CVE-2025-59528-Flowis...

Exploit for Missing Authentication for Critical Function in Flowiseai Flowise

Silentium — HackTheBox Writeup Platform: HackTheBox...

Exploit for Code Injection in Flowiseai Flowise

CVE-2025-59528 PoC ⚠️ For educational and authorized securit...

Exploit for Code Injection in Flowiseai Flowise

CVE-2025-59528 — Flowise AI Authenticated Remote Code Executio...

Exploit for Code Injection in Flowiseai Flowise

CVE-2025-59528-PoC A simple python script to exploit CVE-2025-...

EUVD-2025-59528

Malicious code in gilang-kembang46-sluey npm...

Flowise 3.0.4 - Remote Code Execution (RCE)

Exploit Title: Flowise 3.0.4 - Remote Code Execution RCE Date: 10/11/2025 Exploit Author: nltt0 https://github.com/nltt-br Vendor Homepage: https://flowiseai.com/ Software Link: https://github.com/FlowiseAI/Flowise Version: 3.0.5 CVE: CVE-2025-59528 from requests import post, session from argpars...

CVE-2025-59528

creationtimestamp| type| source ---|---|--- 2025-09-23 00:02:02+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lzhmmncqts2w 2025-11-01 21:02:25+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m4lvabofbd2l 2025-11-22 21:02:33+00:00| seen|...

CVE-2025-59528

Flowise is a drag & drop user interface to build a customized large language model flow. In version 3.0.5, Flowise is vulnerable to remote code execution. The CustomMCP node allows users to input configuration settings for connecting to an external MCP server. This node parses the user-provided...