CVE-2025-59528-POC

CVE-2025-59528 - Удаленное выполнение кода в FlowiseAI CustomMCP CVSS 10.0 Критический | Слепое RCE | FlowiseAI Flowise = 2.2.7-patch.1 и 3.0.6 Обзор Критическая уязвимость удаленного выполнения кода в узле CustomMCP проекта FlowiseAI Flowise. Функция convertToValidJSONString передает...

CVE-2025-59528

CVE-2025-59528 – Nœud CustomMCP de Flowise RCE PoC Aperçu Ce dépôt contient une preuve de concept démontrant CVE-2025-59528 dans Flowise v3.0.5 La vulnérabilité existe dans le nœud customMCP, où l'entrée mcpServerConfig fournie par l'utilisateur est traitée d'une manière qui conduit à l'exécution...

EUVD-2026-56923

Faker: helpers.fake exploitable into arbritary code execution...

CVE-2025-59528.yaml

CVE-2025-59528.yaml Flowise는 맞춤형 대규모 언어 모델 플로우를 구축하기 위한 드래그 앤 드롭 사용자 인터페이스입니다. 버전 3.0.5에서 Flowise는 원격 코드 실행에 취약합니다. CustomMCP 노드는 사용자가 외부 MCP 서버에 연결하기 위한 구성 설정을 입력할 수 있게 해줍니다. 이 노드는 사용자가 제공한 mcpServerConfig 문자열을 파싱하여 MCP 서버 구성을 빌드합니다. 그러나 이 과정에서 보안 검증 없이 JavaScript 코드를 실행합니다. 구체적으로,...

CVE-2025-59528

CVE-2025-59528: Flowise CustomMCP Удаленное выполнение кода PoC Go proof of concept для CVE-2025-59528 , нацеленный на версии Flowise...

CVE-2026-40897

CVE-2026-40897 Удалённое выполнение кода в парсере выражений Math.js ★ CVE-2026-40897 Удалённое выполнение кода в Math.js PoC ★ https://github.com/user-attachments/assets/8c394039-f00a-4875-991a-fb5f40bc6898 Обзор CVE-2026-40897 — это уязвимость обхода песочницы, приводящая к удалённому выполнени...

CVE-2025-58434-59528

CVE-2025-58434 + CVE-2025-59528 Chaîne d'exploitation pour deux vulnérabilités affectant Flowise = 3.0.5. Vulnérabilités CVE-2025-58434 — Prise de contrôle de compte non authentifiée Le point d'accès « mot de passe oublié » renvoie un jeton de réinitialisation de mot de passe valide dans la répon...

React2Shell-CVE-2025-55182-The-Deserialization-Bug-That-Broke-the-Web

React2Shell CVE-2025-55182: The Deserialization Bug That Broke the Web ⚡ React2Shell, CVE-2025-55182, RCE Vulnerability: A critical breakdown of the unsafe deserialization flaw in React Server Components that enables unauthenticated remote code execution across default React/Next.js setups. ⏩ TL;...

CVE-2026-41242

CVE-2026-41242 — protobuf.js Code Injection to RCE CVSS 9.4 Critical | Code Injection CWE-94 Panoramica protobuf.js npm: protobufjs nelle versioni ≤ 7.5.4 e ≤ 8.0.0 è affetto da una vulnerabilità di esecuzione arbitraria di codice tramite i nomi dei tipi nello schema protobuf. Il modulo...

Malicious code in express-session-handler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e94450f5541b39d8310a8b640dee027b0970db6e7cf724352726d49393bfb77 The package advertises itself as an Express session middleware but on module load unconditionally invokes an initPlugin routine in index.js that...

MAL-2026-14303 Malicious code in x6842179305 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca4cf1d317cc7c96f8007c983999e18529f2cb8dea5514dcc68f704c7bda5638 Package x6842179305 ships a main entry 1.js that invokes the Function constructor over a custom-encoded, keyed/XOR-decoded byte buffer, causing an...

CVE-2026-73231

A flaw was found in Faker, a library for generating fake data. The faker.helpers.fake method allows an attacker to control fake templates, which can then access the Function constructor. This access, specifically through fakeEval.resolveProperty when a function returns another function, enables...

CVE-2026-73649

Velocity.js (Java) details: In versions prior to 2.1.7, an existing fix for CVE-2026-44966 protected only the #set assignment target, while property-read expressions in src/compile/references.ts were not filtered. The getReferences() flow could reach getAttributes() and allow a crafted template t...

CVE-2026-73649 Velocity.js: Remote Code Execution via property-read to Function constructor (bypass of CVE-2026-44966 fix)

Velocity.js is a JavaScript implementation of the Apache Velocity template engine. Prior to 2.1.7, the earlier fix for CVE-2026-44966 filtered constructor, proto, and prototype only in the set assignment handler in src/compile/set.ts, while property-read expressions in src/compile/references.ts...

CVE-2026-73649 Velocity.js: Remote Code Execution via property-read to Function constructor (bypass of CVE-2026-44966 fix)

Velocity.js is a JavaScript implementation of the Apache Velocity template engine. Prior to 2.1.7, the earlier fix for CVE-2026-44966 filtered constructor, proto, and prototype only in the set assignment handler in src/compile/set.ts, while property-read expressions in src/compile/references.ts...

CVE-2026-73231

Faker generates massive amounts of fake data in the browser and Node.js. Prior to 10.5.0, the faker.helpers.fake method in src/modules/helpers/eval.ts allows attacker-controlled fake templates to access the Function constructor through fakeEval.resolveProperty when a function returns another...

CVE-2026-73231 Faker: helpers.fake exploitable into arbritary code execution

Faker generates massive amounts of fake data in the browser and Node.js. Prior to 10.5.0, the faker.helpers.fake method in src/modules/helpers/eval.ts allows attacker-controlled fake templates to access the Function constructor through fakeEval.resolveProperty when a function returns another...

CVE-2026-73231

The CVE refers to Faker.js (faker.helpers.fake in src/modules/helpers/eval.ts) prior to version 10.5.0. A crafted fake template can access the Function constructor via fakeEval.resolveProperty when a function returns another function, enabling arbitrary JavaScript execution. This is fixed in 10.5...

CVE-2026-73231 Faker: helpers.fake exploitable into arbritary code execution

Faker generates massive amounts of fake data in the browser and Node.js. Prior to 10.5.0, the faker.helpers.fake method in src/modules/helpers/eval.ts allows attacker-controlled fake templates to access the Function constructor through fakeEval.resolveProperty when a function returns another...

CVE-2026-73231

Faker generates massive amounts of fake data in the browser and Node.js. Prior to 10.5.0, the faker.helpers.fake method in src/modules/helpers/eval.ts allows attacker-controlled fake templates to access the Function constructor through fakeEval.resolveProperty when a function returns another...