4738 matches found
GHSA-35G6-RRW3-V6XC FlowiseAI/Flosise has File Upload vulnerability
Summary A file upload vulnerability in FlowiseAI allows authenticated users to upload arbitrary files without proper validation. This enables attackers to persistently store malicious Node.js web shells on the server, potentially leading to Remote Code Execution RCE. Details The system fails to...
EUVD-2020-27131
Malware in sbrugna...
EUVD-2019-16203
Malware in sbrugna...
EUVD-2019-0266
Malware in sbrugna...
EUVD-2019-0249
Malware in sbrugna...
EUVD-2021-0889
Malware in sbrugna...
EUVD-2019-0336
Malware in sbrugna...
EUVD-2017-0340
Malware in sbrugna...
EUVD-2019-3701
Malware in sbrugna...
EUVD-2019-0359
Malware in sbrugna...
EUVD-2019-0330
Malware in sbrugna...
EUVD-2019-0204
Malware in sbrugna...
EUVD-2021-2085
Malware in sbrugna...
EUVD-2018-0666
Malware in sbrugna...
Unity Linux 20.1070e Security Update: nodejs (UTSA-2025-680625)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-680625 advisory. Accepting arbitrary Subject Alternative Name SAN types, unless a PKI is specifically defined to use a particular SAN type, can result in bypassing name-constrained...
Unity Linux 20.1070e Security Update: nodejs (UTSA-2025-680626)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-680626 advisory. Due to the formatting logic of the console.table function it was not safe to allow user controlled input to be passed to the properties parameter while simultaneousl...
CVE-2025-61687 FlowiseAI/Flosise has File Upload vulnerability
Flowise is a drag & drop user interface to build a customized large language model flow. A file upload vulnerability in version 3.0.7 of FlowiseAI allows authenticated users to upload arbitrary files without proper validation. This enables attackers to persistently store malicious Node.js web...
RockyLinux 10 : nodejs22 (RLSA-2025:8493)
The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:8493 advisory. nodejs: Remote Crash via SignTraits::DeriveBits in Node.js CVE-2025-23166 Tenable has extracted the preceding description block directly from the...
ROS-20251006-11
A vulnerability in the permissions model of the Node.js software platform is related to flaws in the processing of HTTP requests. Exploitation of the vulnerability could allow a remote attacker to bypass existing security restrictions and send unauthorized requests. existing security restrictions...