CVE-2025-59528-POC

CVE-2025-59528 - Ejecución Remota de Código en FlowiseAI CustomMCP CVSS 10.0 Crítico | RCE Ciego | FlowiseAI Flowise = 2.2.7-patch.1 y 3.0.6 Resumen Una vulnerabilidad crítica de ejecución remota de código en el nodo CustomMCP de FlowiseAI Flowise. La función convertToValidJSONString pasa la...

CVE-2025-59528

CVE-2025-59528 – Ejecución Remota de Código PoC en el Nodo CustomMCP de Flowise Resumen Este repositorio contiene una prueba de concepto que demuestra CVE-2025-59528 en Flowise v3.0.5. La vulnerabilidad existe en el nodo customMCP, donde la entrada mcpServerConfig proporcionada por el usuario se...

CVE-2025-59528.yaml

CVE-2025-59528.yaml Flowise es una interfaz de usuario de arrastrar y soltar para construir un flujo de modelos de lenguaje grandes personalizados. En la versión 3.0.5, Flowise es vulnerable a la ejecución remota de código. El nodo CustomMCP permite a los usuarios ingresar ajustes de configuració...

EUVD-2026-84941

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote attacker to execute arbitrary code due to improper neutralization of user-controlled input within the new Function constructor...

CVE-2026-18162

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote attacker to execute arbitrary code due to improper neutralization of user-controlled input within the new Function constructor...

CVE-2026-18162

The IBM Financial Transaction Manager (FTM) for RedHat OpenShift is impacted by a vulnerability that could allow a remote attacker to execute arbitrary code . The root cause is the improper neutralization of user-controlled input within the new Function constructor . The vulnerability has a CRITI...

CVE-2026-18162 IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote attacker to execute arbitrary code due to improper neutralization of user-controlled input within the new Function constructor...

CVE-2025-58434-59528

CVE-2025-58434 + CVE-2025-59528 影响 Flowise = 3.0.5 的两个漏洞的利用链。 漏洞 CVE-2025-58434 — 未认证账户接管 忘记密码接口会在 API 响应中返回有效的密码重置令牌，且无需认证。只要知道有效电子邮件地址的攻击者即可在无用户交互的情况下重置任意账户的密码。 CVE-2025-59528 — 认证后远程代码执行 CustomMCP 节点将用户控制的输入直接传递给 Function 构造函数，并拥有完整的 Node.js 权限。拥有有效 API 密钥的认证用户可以以 Flowise 进程用户的身份执行任意操作系统命令。...

CVE-2026-40897

CVE-2026-40897 Ejecución Remota de Código en el Analizador de Expresiones de Math.js ★ CVE-2026-40897 Ejecución Remota de Código en Math.js PoC ★ https://github.com/user-attachments/assets/8c394039-f00a-4875-991a-fb5f40bc6898 Resumen CVE-2026-40897 es una vulnerabilidad de Omisión de Sandbox que...

React2Shell-CVE-2025-55182-The-Deserialization-Bug-That-Broke-the-Web

React2Shell（CVE-2025-55182）：打破网络的反序列化漏洞 ⚡ React2Shell，CVE-2025-55182，RCE漏洞：对React服务器组件中不安全的反序列化缺陷的深入分析，该缺陷能够在默认的React/Next.js环境中实现未经身份验证的远程代码执行。 ⏩ 快速总结 React2Shell（CVE-2025-55182）是一个严重远程代码执行（RCE）漏洞，影响React 19.x中的React服务器组件（RSC）以及Next.js等框架。该漏洞源于对“Flight”协议块的 不安全反序列化，允许攻击者注入恶意结构，这些结构会解析为Function构造...

Atlassian Confluence 8.9.0 < 9.2.24 / 9.3.1 < 10.2.17 (CONFSERVER-104362)

The version of Atlassian Confluence Server running on the remote host is affected by a vulnerability as referenced in the CONFSERVER-104362 advisory. - Impact: The fix for CVE-2021-23337 https://github.com/advisories/GHSA-35jh-r3h4-6jhm added validation for the variable option in .template but di...

Atlassian Jira Service Management Data Center and Server 5.15.2 < 10.3.24 / 10.4.x < 11.3.7 (JSDSERVER-16596)

The version of Atlassian Jira Service Management Data Center and Server Jira Service Desk running on the remote host is affected by a vulnerability as referenced in the JSDSERVER-16596 advisory. - Impact: The fix for CVE-2021-23337 https://github.com/advisories/GHSA-35jh-r3h4-6jhm added validatio...

CVE-2026-93985

OpenPanel js-runtime through commit bad75bdd is affected by a sandbox escape in its JavaScript webhook template validator . The validator fails to block computed member access to constructor chains, allowing attackers with project write access to craft webhook templates using computed property no...

CVE-2026-41242

CVE-2026-41242 — Inyección de código en protobuf.js a RCE CVSS 9.4 Crítico | Inyección de código CWE-94 Resumen protobuf.js npm: protobufjs versiones ≤ 7.5.4 y ≤ 8.0.0 tienen una vulnerabilidad de ejecución de código arbitrario a través de nombres de tipo en el esquema protobuf. El módulo...

CVE-2025-59528

CVE-2025-59528: Flowise CustomMCP Prueba de Concepto de Ejecución Remota de Código Una prueba de concepto en Go para CVE-2025-59528 dirigida a versiones de Flowise = 3.0.5. Resumen Flowise permite la ejecución de JavaScript no validada a través de la configuración del nodo CustomMCP. La aplicació...

EUVD-2026-81012

Redocly CLI makes OpenAPI validation, linting, and documentation workflows easier. Prior to version 2.33.0 of @redocly/respect-core and @redocly/cli, the respect command dynamically evaluates $faker runtime expressions in Arazzo descriptions. A crafted expression can traverse constructor,...

CVE-2026-63325: Improper Control of Generation of Code

Redocly CLI makes OpenAPI validation, linting, and documentation workflows easier. Prior to version 2.33.0 of @redocly/respect-core and @redocly/cli, the respect command dynamically evaluates $faker runtime expressions in Arazzo descriptions. A crafted expression can traverse constructor,...

CVE-2026-57138

PraisonAI is a multi-agent teams system. From 1.4.0 until 1.7.2, codeMode in src/praisonai-ts/src/tools/builtins/code-mode.ts executes untrusted JavaScript with new Function inside withsandbox and relies on a small source-code blocklist plus shadowed process and require properties. Code can use...

CVE-2026-57138 PraisonAI codeMode sandbox escape via Function constructor

PraisonAI is a multi-agent teams system. From 1.4.0 until 1.7.2, codeMode in src/praisonai-ts/src/tools/builtins/code-mode.ts executes untrusted JavaScript with new Function inside withsandbox and relies on a small source-code blocklist plus shadowed process and require properties. Code can use...

CVE-2026-57138 PraisonAI codeMode sandbox escape via Function constructor

PraisonAI is a multi-agent teams system. From 1.4.0 until 1.7.2, codeMode in src/praisonai-ts/src/tools/builtins/code-mode.ts executes untrusted JavaScript with new Function inside withsandbox and relies on a small source-code blocklist plus shadowed process and require properties. Code can use...