31 matches found
CVE-2025-3248
Langflow CVE-2025-3248 Exploit A Python-based exploit for CVE-2025-3248, which allows remote and unauthenticated attackers to execute arbitrary code on vulnerable Langflow instances through crafted HTTP requests. Features Single URL or bulk scanning from file Automatic vulnerability detection...
Mass-CVE-2025-3248
Langflow CVE-2025-3248 Exploit Tool Overview This tool exploits the critical Remote Code Execution RCE vulnerability CVE-2025-3248 found in Langflow versions prior to 1.3.0. The vulnerability exists in the /api/v1/validate/code endpoint which improperly executes user-supplied code without...
CVE-2025-3248-POC
CVE-2025-3248-POC POC of CVE-2025-3248 execute any command on target machine usage: python poc.py 'http://xxx.com' 'ls /' leave some love on victims' computers poc.py...
exposecheck
EXPOSECHECK Only run against servers you own or are authorized to test. Scope: a passing result means only that this narrow check found an authentication challenge and a Langflow version at or above the patched threshold for CVE-2025-3248. It is not a general security, reputation, configuration, ...
CVE-2025-3248
CVE-2025-3248 Exploit Tool Documentation Introduction This tool is used to exploit the CVE-2025-3248 vulnerability a Python-based code injection vulnerability to achieve remote command execution RCE on the target server by crafting malicious payloads. The vulnerability exists in a web application...
Langflow-RCE-CVE-2025-3248
CVE-2025-3248 — Langflow Unauthenticated RCE PoC A clean, tested proof-of-concept for CVE-2025-3248 , an unauthenticated remote code execution vulnerability in Langflow versions prior to 1.3.0. What is CVE-2025-3248? Langflow's /api/v1/validate/code endpoint accepts Python code for static...
CVE-2025-3248
中文 ｜ English Langflow Vulnerability Scanner A vulnerability scanner for CVE-2025-3248 in Langflow applications. Features Scan single target or multiple targets using FOFA Execute system commands on vulnerable targets Retrieve system information Custom payload support Progress bar for FOFA scannin...
langflow-rce-exploit
Langflow RCE Exploit CVE-2025-3248 Remote Code Execution Exploit for Langflow CVE-2025-3248 Features Automatic vulnerability detection Multiple exploitation modes: Interactive shell Single command execution Reverse shell connection File upload capability Colorized user interface Multiple reverse...
Demo_CVE-2025-3248
DemoCVE-2025-3248 — PoC educativo Propósito: Simular la vulnerabilidad CVE-2025-3248 en un entorno aislado para aprender sobre seguridad de la información: montar un laboratorio, observar el comportamiento explotable y discutir medidas de mitigación. ⚠️ DECLARACIÓN LEGAL Y ÉTICA SOLO USO ÉTICO Tod...
CVE-2025-3248-Langflow-RCE
mitsec - CVE-2025-3248 Langflow RCE Exploit Remote Code Execution RCE exploit for Langflow applications vulnerable to CVE-2025-3248. Affected Endpoint: /api/v1/validate/code 🚀 Exploit Features Remote and unauthenticated RCE No authentication required Python3 one-liner script Colorized terminal...
Langflow < 1.3.0 Unauthenticated Code Injection RCE (CVE-2025-3248) (Direct Check)
Binary data langflowvalidatecodercecve20253248.nbin...
Langflow 1.2.x - Remote Code Execution (RCE)
!/usr/bin/env python3 Exploit Title: Langflow 1.2.x - Remote Code Execution RCE Date: 2025-07-11 Exploit Author: Raghad Abdallah Al-syouf Vendor Homepage: https://github.com/logspace-ai/langflow Software Link: https://github.com/logspace-ai/langflow/releases Version: = 1.2.x Tested on: Ubuntu /...
Exploit for Code Injection in Langflow
CVE-2025-3248 - Langflow Code Validation Endpoint RCE A proof...
Exploit for Code Injection in Langflow
⚠️ Langflow RCE Exploit Scanner CVE-2025-3248 This Python-b...
Exploit for Code Injection in Langflow
Langflow CVE-2025-3248 Exploit Tool !Severityhttps://img.s...
Exploit for Code Injection in Langflow
Langflow RCE Exploit CVE-2025-3248 !Python Versionhttps:...
Exploit for Code Injection in Langflow
CVE-2025-3248 Langflow RCE Scanner 🔍 Description A powerf...
Exploit for Code Injection in Langflow
CVE-2025-3248 – Unauthenticated Remote Code Execution in Langf...