7 matches found
CVE-2025-58434
Reemplaza example.com con tu objetivo...
CVE-2025-58434-PoC
PoC de CVE-2025-58434 Script de prueba de concepto en Python para activar POST /api/v1/account/forgot-password. ⚠️ Solo con fines educativos e investigación de seguridad autorizada. Ejecutar esta herramienta contra sistemas que no posees o sin permiso por escrito para probar es ilegal. Créditos...
Flowise-RCE
Flowise-RCE CVE-2025-58434 & CVE-2025-59528...
CVE-2025-58434-PoC
CVE-2025-58434-PoC Dieses Repository enthält ein Proof of Concept PoC Python-Skript für CVE-2025-58434, das es Angreifern ermöglicht, Passwörter anderer Benutzer ohne Authentifizierungsprozess in Flowise Version 3.0.5 und niedriger aufgrund von Token-Leckage zu ändern. Verwendung Um den Exploit...
Exploit for Missing Authentication for Critical Function in Flowiseai Flowise
Silentium — HackTheBox Writeup Platform: HackTheBox...
Flowise < 3.0.5 - Missing Authentication for Critical Function
Exploit Title: Flowise 3.0.5 - Missing Authentication for Critical Function Date: 10/11/2025 Exploit Author: nltt0 https://github.com/nltt-br Vendor Homepage: https://flowiseai.com/ Software Link: https://github.com/FlowiseAI/Flowise Version: 3.0.5 CVE: CVE-2025-58434 from requests import post fr...
CVE-2025-58434
Flowise is a drag & drop user interface to build a customized large language model flow. In version 3.0.5 and earlier, the forgot-password endpoint in Flowise returns sensitive information including a valid password reset tempToken without authentication or verification. This enables any attacker...