Exploit for CVE-2026-42945

nginx-rift-detect Behavioral detection script for CVE-2026-...

CVE-2026-40699

creationtimestamp| type| source ---|---|--- 2026-05-15 06:50:56+00:00| seen| https://www.acn.gov.it/portale/w/f5-disponibile-poc-per-lo-sfruttamento-della-cve-2026-42945...

Node.js: NULL pointer dereference in node:sqlite DatabaseSync#applyChangeset() via malformed SQLite changeset

Summary: A 19-byte malformed SQLite changeset passed to Node.js node:sqlite DatabaseSyncapplyChangeset causes a native NULL pointer dereference and terminates the Node.js process. Description: The built-in Node.js node:sqlite API exposes DatabaseSyncapplyChangesetchangeset, options, which accepts...

CVE-2026-44716

creationtimestamp| type| source ---|---|--- 2026-05-15 02:17:30+00:00| published-proof-of-concept| https://github.com/pipecat-ai/pipecat/security/advisories/GHSA-3363-2ph6-35wh 2026-06-10 01:01:22+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnvj63jwty26 2026-06-10...

CVE-2026-45349

creationtimestamp| type| source ---|---|--- 2026-05-14 20:24:35+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-gfm2-xm6c-37qc...

CVE-2026-45306

creationtimestamp| type| source ---|---|--- 2026-05-14 20:17:27+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-w727-595x-pc3r...

CVE-2026-46492

creationtimestamp| type| source ---|---|--- 2026-05-14 19:57:57+00:00| published-proof-of-concept| https://github.com/commenthol/md-fileserver/security/advisories/GHSA-32q2-hhr5-6qvv 2026-06-09 17:11:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnuowoqpot2g...

CVE-2026-6145

creationtimestamp| type| source ---|---|--- 2026-05-14 19:00:10+00:00| published-proof-of-concept| Telegram/XDvWvSLpOLgWYjCnx5nXaVDhxhCY5P5ucZ2jMelcgSmye8Y 2026-05-14 21:00:04+00:00| seen| Telegram/pxejltfM6t0bOCIPs7C1JhjfACvEO7Gy-x7DlZhJbRtGeV0 2026-07-10 20:17:00+00:00| seen|...

CVE-2026-46481

creationtimestamp| type| source ---|---|--- 2026-05-14 15:37:25+00:00| published-proof-of-concept| https://github.com/open-metadata/OpenMetadata/security/advisories/GHSA-9vmh-whc4-7phg 2026-06-08 19:49:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnshblm7jb2r...

Arbitrary Code Injection

Overview flowise-components is a Flowiseai Components Affected versions of this package are vulnerable to Arbitrary Code Injection via the node-custom-function endpoint when user-supplied JavaScript is executed in a NodeVM sandbox without sufficient route-level authorization. A user can execute...

exploit-development

exploit-dev...

CVE-2026-46480

creationtimestamp| type| source ---|---|--- 2026-05-14 14:18:32+00:00| published-proof-of-concept| https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-wxrr-jp8m-qq7f 2026-06-08 17:04:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mns634lsdt2a...

CVE-2026-46479

creationtimestamp| type| source ---|---|--- 2026-05-14 14:18:18+00:00| published-proof-of-concept| https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-mq53-pc65-wjc4 2026-06-08 17:14:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mns6n7iq7p2r...

CVE-2026-46477

creationtimestamp| type| source ---|---|--- 2026-05-14 14:18:06+00:00| published-proof-of-concept| https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-5h9v-837x-m97r 2026-06-08 17:24:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mns75tvowx2z...

CVE-2026-46478

creationtimestamp| type| source ---|---|--- 2026-05-14 14:17:49+00:00| published-proof-of-concept| https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-7j65-65cr-6644 2026-06-08 16:59:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mns5rqk6nl2o...

CVE-2026-46476

creationtimestamp| type| source ---|---|--- 2026-05-14 14:17:36+00:00| published-proof-of-concept| https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-728h-4mwj-f2p4 2026-06-08 17:11:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mns6gihbi32r...

CVE-2026-46442

creationtimestamp| type| source ---|---|--- 2026-05-14 14:13:39+00:00| published-proof-of-concept| https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-9rvc-vf7m-pgm2 2026-06-08 16:47:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mns54nhn6s2o 2026-06-22 00:39:12+00:00|...

CVE-2026-42861

creationtimestamp| type| source ---|---|--- 2026-05-14 14:12:50+00:00| published-proof-of-concept| https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-6fw7-3q8r-m5vj...

CVE-2026-46441

creationtimestamp| type| source ---|---|--- 2026-05-14 14:12:38+00:00| published-proof-of-concept| https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-hp26-q66v-q2w7 2026-06-08 16:53:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mns5g6b3io2a 2026-06-22 00:32:26+00:00|...

CVE-2026-42862

creationtimestamp| type| source ---|---|--- 2026-05-14 14:12:20+00:00| published-proof-of-concept| https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-x5v6-pj28-cwwm...