PoC-and-yara-rules-of-CVE-2025-59528-Flowise-has-Remote-Code-Execution-vulnerability

PoC-and-yara-rules-of-CVE-2025-59528-Flowise-has-Remote-Code-Execution-vulnerability LEGAL DISCLAIMER AND TERMS OF USE The Proof of Concept PoC code and technical information provided in this document are intended solely for educational purposes, academic research, and authorized security testing...

Project-CVE-2025-54068

Livewire2025CVE Livewire CVE-2025-54068 Scanner Automated vulnerability scanner for detecting CVE-2025-54068 in Laravel applications using Livewire v3.0.0-beta.1 through v3.6.3. Overview This tool scans a list of websites for indicators of the critical Livewire remote code execution vulnerability...

EUVD-2026-103012

fish-island-backend through commit 7c61b78 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to make the server fetch attacker-supplied URLs via the url parameter of GET /api/web/parse. Attackers can target internal hosts, loopback services or clou...

CVE-2026-111720

The fish-island-backend software (specifically versions through commit 7c61b78 ) is vulnerable to an unauthenticated Server-Side Request Forgery (SSRF) vulnerability. This flaw exists in the GET /api/web/parse endpoint, where the application fails to properly validate the url parameter. Remote at...

EUVD-2026-102994

ChatOllama through commit 96c3ce5 contains an insecure direct object reference vulnerability that allows remote attackers to access other users' private knowledge bases by supplying sequential ids. Attackers can enumerate ids via GET /api/knowledgebases/id or the knowledgebaseId parameter of POST...

EUVD-2026-102985

qKnow through 2.4.3 contains a missing authentication vulnerability that allows unauthenticated remote attackers to access /flyflow workflow integration endpoints permitted in SecurityConfig. Attackers can POST sequential userId values to /flyflow/userById or call roleAll and deptListByParentDept...

CVE-2026-111694

The qKnow software versions through 2.4.3 are vulnerable to a missing authentication flaw in the /flyflow workflow integration endpoints. Due to improper security configurations in SecurityConfig , unauthenticated remote attackers can access specific endpoints like /flyflow/userById , roleAll , a...

CVE-2026-111686 IceCMS through 4.1.5 SQL Injection via /WebArticle/findarticlesbynum

IceCMS through 4.1.5 contains an unauthenticated sql injection vulnerability that allows remote attackers to inject SQL through the num path parameter of /WebArticle/findarticlesbynum. Attackers can append crafted SQL after the LIMIT clause concatenated into a MyBatis-Plus QueryWrapper to extract...

CVE-2026-111687 WeRSS (we-mp-rss) through 1.5.3 RCE via template Parameter in /rss Endpoint

WeRSS we-mp-rss through 1.5.3 contains a remote code execution vulnerability that allows unauthenticated attackers to run code via the template parameter of the public GET /rss/feedid endpoint. Attackers can supply a non-built-in ext value and a =expression template whose object-subclass traversa...

EUVD-2026-102977

IceCMS through 4.1.5 contains an unauthenticated sql injection vulnerability that allows remote attackers to inject SQL through the num path parameter of /WebArticle/findarticlesbynum. Attackers can append crafted SQL after the LIMIT clause concatenated into a MyBatis-Plus QueryWrapper to extract...

EUVD-2026-102978

WeRSS we-mp-rss through 1.5.3 contains a remote code execution vulnerability that allows unauthenticated attackers to run code via the template parameter of the public GET /rss/feedid endpoint. Attackers can supply a non-built-in ext value and a =expression template whose object-subclass traversa...

CVE-2026-111687

The software WeRSS (we-mp-rss) versions through 1.5.3 is vulnerable to Remote Code Execution (RCE) via the public GET /rss/{feed_id} endpoint. The root cause is an eval injection (CWE-95) flaw where an unauthenticated attacker can provide a non-built-in ext value and a {{=expression}} template. B...

CVE-2026-111686

The IceCMS content management system, in versions through 4.1.5 , is vulnerable to an unauthenticated SQL injection vulnerability. The root cause is located in the num path parameter of the /WebArticle/findarticlesbynum endpoint. Specifically, attackers can append crafted SQL after the LIMIT clau...

CVE-2026-111685

The IceCMS content management system, version 4.1.5 and below , is vulnerable to an unauthenticated SQL injection vulnerability. The flaw exists in the /WebResource/findresourcebynum endpoint, where a crafted num path parameter allows remote attackers to inject SQL. Specifically, attackers can ap...

EUVD-2026-103061

bbs-go through 4.4.6 contains an authentication bypass vulnerability in the /api/login/googleonetap endpoint that allows remote attackers to log in as other users by submitting Google ID tokens issued to any OAuth client. Attackers operating their own Google OAuth client can capture a victim's...

CVE-2026-111639

bbs-go through 4.4.6 contains an authentication bypass vulnerability in the /api/login/googleonetap endpoint that allows remote attackers to log in as other users by submitting Google ID tokens issued to any OAuth client. Attackers operating their own Google OAuth client can capture a victim's...

CVE-2026-111613

AllData through 0.7.1 contains an unauthenticated JDBC injection vulnerability that allows remote attackers to open arbitrary database connections by supplying jdbcUrl and jdbcDriverClass values to the data-dts /jobJdbcDatasource/test endpoint. Attackers can supply a MySQL JDBC URL with...

EUVD-2026-103035

AllData through 0.7.1 contains an unauthenticated JDBC injection vulnerability that allows remote attackers to open arbitrary database connections by supplying jdbcUrl and jdbcDriverClass values to the data-dts /jobJdbcDatasource/test endpoint. Attackers can supply a MySQL JDBC URL with...

CVE-2026-111392 SGLang through 0.5.21 KV Cache Poisoning via mm_hashes in /generate

SGLang through 0.5.21 trusts caller-supplied mmhashes values as the multimodal prefix-cache key, allowing remote attackers to poison cached KV entries across requests. Attackers can send a different image under a known or predicted hash via /generate to disclose another request's image content or...

CVE-2026-111392

SGLang versions through 0.5.21 are vulnerable to KV Cache Poisoning due to insufficient verification of mm_hashes values used as multimodal prefix-cache keys. A remote attacker can exploit this by sending a different image with a known or predicted hash via the /generate endpoint. This allows the...