isa_recovery

Sistema de Recuperación ISA Un pipeline de ingeniería inversa que convierte un binario de firmware y su desensamblado posiblemente incorrecto en una especificación de procesador funcional para Ghidra. Cuando te encuentras con un procesador propietario sin documentación y sin soporte en Ghidra, es...

CVE-2026-34156-NocoBase-Sandbox-Escape-via-Workflow-Execution-Vulnerability-

CVE-2026-34156 – Escape del Sandbox de NocoBase RCE -orange Ejecución Remota de Código autenticada en versiones de NocoBase ≤ 2.0.26 mediante escape del sandbox del flujo de trabajo. 📋 Descripción CVE-2026-34156 es una vulnerabilidad de escape del sandbox en el motor de flujo de trabajo de...

Blackash-CVE-2025-68613

🚨 CVE-2025-68613 — n8n 中的严重 RCE 漏洞 严重性： 🔴 严重 影响： 远程代码执行 受影响平台： n8n（工作流自动化） 🧩 概述 CVE-2025-68613 是 n8n （一个开源工作流自动化平台）中的一个严重安全漏洞 。 该问题允许经过身份验证的攻击者 通过滥用工作流表达式的求值方式，在服务器上执行任意代码 。 🎯 漏洞详情 类型： 表达式注入 → 远程代码执行 CWE： CWE-913 — 对动态管理的代码资源的控制不当 攻击向量： 网络 所需权限： 低（已认证用户） 用户交互： 无 影响范围： 已更改 💥 为什么危险： 恶意表达式在没有适当沙箱隔离...

Analysis-And-POC-N8N-CVE-2025-68613

概述（n8n 与 CVE-2025-68613） n8n 是一个工作流自动化平台，用于通过可视化流程和 JavaScript 表达式来集成系统与服务。 CVE-2025-68613 是一个严重的远程代码执行（RCE）漏洞 ，CVSS 评分为 9.9，影响多个版本的 n8n。该漏洞出现在受影响版本中，工作流中 JavaScript 表达式的处理未得到适当隔离。这允许拥有编辑权限的认证用户在应用程序预期行为之外执行代码 。 在实践中，该漏洞可被利用来在运行 n8n 的服务器上以应用程序自身的权限执行命令。受影响版本范围从 0.211.0 到 1.120.4 、1.121.1 和 1.122....

CVE-2026-103249

n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain a stored DOM cross-site scripting vulnerability in Resource Locator parameter dropdown link handling. Workflow authors can inject malicious script URLs that execute arbitrary JavaScript in the editor...

CVE-2026-103249 n8n before 1.123.80, 2.39.6, and 2.40.1 Stored DOM XSS via Resource Locator

n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain a stored DOM cross-site scripting vulnerability in Resource Locator parameter dropdown link handling. Workflow authors can inject malicious script URLs that execute arbitrary JavaScript in the editor...

EUVD-2026-90643

n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain a stored DOM cross-site scripting vulnerability in Resource Locator parameter dropdown link handling. Workflow authors can inject malicious script URLs that execute arbitrary JavaScript in the editor...

CVE-2026-103249 n8n before 1.123.80, 2.39.6, and 2.40.1 Stored DOM XSS via Resource Locator

n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain a stored DOM cross-site scripting vulnerability in Resource Locator parameter dropdown link handling. Workflow authors can inject malicious script URLs that execute arbitrary JavaScript in the editor...

CVE-2026-103247 n8n before 1.123.80 Credential Tampering via Duplicate Node IDs

n8n versions before 1.123.80 contain a credential tampering vulnerability where duplicate node IDs bypass the workflow credential tamper guard. Attackers with editor access to shared workflows can exploit mismatched node ID and name matching to retain victim credentials and redirect secrets to...

CVE-2026-103245 n8n before 1.123.80, 2.39.6, and 2.40.1 Missing Webhook Signature Verification

n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 fail to verify the x-webflow-signature HMAC in the Webflow Trigger node webhook handler. Unauthenticated attackers can send forged webhook requests with attacker-controlled payloads to trigger workflows and...

EUVD-2026-90749

n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 fail to verify the x-webflow-signature HMAC in the Webflow Trigger node webhook handler. Unauthenticated attackers can send forged webhook requests with attacker-controlled payloads to trigger workflows and...

n8n-cve-2025-68613

CVE-2025-68613 – n8n 表达式注入远程代码执行漏洞 该工具包提供了针对 n8n 工作流自动化平台 上关键漏洞 CVE-2025-68613 的 扫描器与 PoC 利用脚本 。 此仓库提供了针对 CVE-2025-68613 漏洞（影响 n8n 工作流自动化平台 ）的 扫描器与 PoC 利用脚本 。 警告 / 注意 中文 此工具 仅 用于 合法且已获授权 的安全测试。 禁止在未经所有者许可的情况下将此工具用于任何系统。 English This tool is ONLY for authorized and legal security testing...

CVE-2026-103249: Improper Neutralization of Input During Web Page Generation

n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain a stored DOM cross-site scripting vulnerability in Resource Locator parameter dropdown link handling. Workflow authors can inject malicious script URLs that execute arbitrary JavaScript in the editor...

CVE-2026-55251: Improper Control of Generation of Code

NetBox Device Type Library is a collection of community-sourced device type definitions for import into NetBox. Prior to commit f41fc1e, the CI workflow .github/workflows/validation.yml runs on pullrequest and executes code supplied by the pull request before any maintainer review. Three...

CVE-2026-102115 Kiteworks Core Authentication Bypass in the Password Reset Workflow

Kiteworks Core did not correctly validate a parameter submitted to the password reset workflow. An unauthenticated attacker who knew the email address of a user with a locally stored password could potentially reset that account's password without access to the emailed reset link and then...

CVE-2026-102115

Kiteworks Core is vulnerable to an authentication bypass in its password reset workflow due to insufficient validation of a submitted parameter. An unauthenticated attacker who possesses a user's email address can reset the account's password without needing access to the emailed reset link. This...

CVE-2026-100276

In JetBrains YouTrack before 2026.2.19197 guest users could remove a workflow action's visibility restriction and run the action...

CVE-2026-100275

In JetBrains YouTrack before 2026.2.19197 stored XSS in the workflow error notification toast was possible...

CVE-2026-100275

JetBrains YouTrack versions prior to 2026.2.19197 are vulnerable to stored XSS within the workflow error notification toast. This flaw allows for unauthorized script execution in the context of the user's session. Remediation is available in version 2026.2.19197 and subsequent releases. No specif...

CVE-2026-100276

In JetBrains YouTrack versions prior to 2026.2.19197 , an incorrect authorization vulnerability (CWE-863) allowed guest users to bypass visibility restrictions on workflow actions. This flaw enables unauthorized users to execute actions that should be restricted, potentially impacting system inte...