CVE-2025-59528-PoC

CVE-2025-59528 PoC Script de prueba de concepto en Python para desencadenar la ruta RCE CustomMCP de Flowise a través de POST /api/v1/node-load-method/customMCP. ⚠️ Solo para fines educativos e investigación de seguridad autorizada. Ejecutar esta herramienta contra sistemas que no posee o para los...

-CVE-2025-59528-PoC

CVE-2025-59528-PoC SOLO CON FINES EDUCATIVOS Un sencillo script de Python para explotar CVE-2025-59528, una vulnerabilidad de RCE autenticada en la aplicación Flowise, una popular herramienta de IA, que también forma parte de un desafío estacional de HTB, en el que lo probé, por cierto. Si no...

CVE-2025-59528

CVE-2025-59528 Proof of Concept English version PoC minimaliste et orienté validation technique de la vulnérabilité sur un environnement autorisé. Prerequis Avoir un compte utilisateur sur le dashboard Flowise cible. Disposer d'une clef API valide associee a ce compte. Demarrer un listener sur ta...

WordPress WP w3all phpBB plugin <= 3.0.5 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Khanh Nguyen in WordPress Plugin WP w3all phpBB versions = 3.0.5...

Security Bulletin:i18nextify JavaScript Library: URL-Injection Vulnerability Prior to 3.0.5

Summary i18nextify is a JavaScript library that adds i18nextify is a JavaScript library that adds website internationalization via a script tag, without source code changes. Versions prior to 3.0.5 interpolate the lng and ns values directly into the configured loadPath / addPath URL template...

WordPress Blogfolio theme <=3.0.5 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Blogfolio versions =3.0.5...

CVE-2026-25403

Unauthenticated Broken Access Control in Ultimate Store Kit Elementor Addons = 3.0.5 versions...

CVE-2026-25403 WordPress Ultimate Store Kit Elementor Addons plugin <= 3.0.5 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Ultimate Store Kit Elementor Addons = 3.0.5 versions...

CVE-2026-25403 WordPress Ultimate Store Kit Elementor Addons plugin <= 3.0.5 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Ultimate Store Kit Elementor Addons = 3.0.5 versions...

CLSA-2026-1784509762 TuxCare security update for org.springframework (11 CVEs)

TuxCare rebuilt 21 org.springframework packages to address 11 CVEs. Fixed in 3.0.5.RELEASE-tuxcare.8...

CLSA-2026-1781139197 TuxCare security update for org.springframework (1 CVE)

TuxCare rebuilt 21 org.springframework packages to address 1 CVE. Fixed in 3.0.5.RELEASE-tuxcare.5...

CLSA-2026-1781052740 TuxCare security update for org.springframework (1 CVE)

TuxCare rebuilt 21 org.springframework packages to address 1 CVE. Fixed in 3.0.5.RELEASE-tuxcare.4...

CLSA-2026-1779842933 TuxCare security update for org.springframework (3 CVEs)

TuxCare rebuilt 21 org.springframework packages to address 3 CVEs. Fixed in 3.0.5.RELEASE-tuxcare.2...

CLSA-2026-1779065203 TuxCare security update for minimatch (3 CVEs)

TuxCare rebuilt minimatch to address 3 CVEs. Fixed in 3.0.5-tuxcare.1...

CLSA-2026-1779238042 TuxCare security update for org.springframework (3 CVEs)

TuxCare rebuilt 21 org.springframework packages to address 3 CVEs. Fixed in 3.0.5.RELEASE-tuxcare.1...

CVE-2026-66475 WordPress Checkout Field Editor for WooCommerce &#8211; Checkout Manager plugin <= 3.0.5 - Cross Site Scripting (XSS) vulnerability

Shop manager Cross Site Scripting XSS in Checkout Field Editor for WooCommerce Checkout Manager = 3.0.5 versions...

EUVD-2026-49250

Shop manager Cross Site Scripting XSS in Checkout Field Editor for WooCommerce Checkout Manager = 3.0.5 versions...

PT-2026-64970

Shop manager Cross Site Scripting XSS in Checkout Field Editor for WooCommerce Checkout Manager = 3.0.5 versions...

EUVD-2026-48114

Unauthenticated Sensitive Data Exposure in Ultimate Store Kit Elementor Addons = 3.0.5 versions...

CVE-2026-65505 WordPress Ultimate Store Kit Elementor Addons plugin <= 3.0.5 - Sensitive Data Exposure vulnerability

Unauthenticated Sensitive Data Exposure in Ultimate Store Kit Elementor Addons = 3.0.5 versions...