PULSEUnderground Intel

AO VIVO37sinais / 24h

FEED

ransomn0n reclama a Company #147 · USransomn0n reclama a Company #146 · USransomn0n reclama a Company #145 · USransomn0n reclama a Company #144 · USransomn0n reclama a Company #143 · USransomn0n reclama a Company #142 · KRransomn0n reclama a Company #141 · USransomn0n reclama a Company #140 · CAransomn0n reclama a Company #139 · USransomn0n reclama a Company #138 · CAransomsafepay reclama a by.zivor.co.il · ILransomqilin reclama a XK net SA de CV · MXransomqilin reclama a BOSH Engineering Private Limited · SG · Manufacturingransomqilin reclama a J. J. Louro Pereira · PT · Otherransomn0n reclama a Company #147 · USransomn0n reclama a Company #146 · USransomn0n reclama a Company #145 · USransomn0n reclama a Company #144 · USransomn0n reclama a Company #143 · USransomn0n reclama a Company #142 · KRransomn0n reclama a Company #141 · USransomn0n reclama a Company #140 · CAransomn0n reclama a Company #139 · USransomn0n reclama a Company #138 · CAransomsafepay reclama a by.zivor.co.il · ILransomqilin reclama a XK net SA de CV · MXransomqilin reclama a BOSH Engineering Private Limited · SG · Manufacturingransomqilin reclama a J. J. Louro Pereira · PT · Other

CVE Watch409.857 no arquivo completo

Vulnerabilidades exploráveis hoje

409,857na visualização atual

Score único que combina CVSS, presença no KEV e EPSS. Cada CVE com sua própria ficha — timeline da publicação até a exploração ativa.

No catálogo KEV1,769

Novos KEV · 24H0

Exploit Today ≥ 701,700

Distribuição · última janela

Crítica
5,527
Alta
21,042
Média
20,196
Baixa
2,086

Filtros

Filtros

Janela

Severidade

Filtros

Vulnerabilidades2,241–2,280 · 409,857

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2001-0803—

——30——CVE-2011-2110—

——30——CVE-1999-0067—

——30——CVE-2023-34127—

——30——CVE-2020-35476—

——30——CVE-2021-24762—

——30——CVE-2022-2414—

——30——CVE-2017-14491—

——30——CVE-2022-0441—

——30——CVE-2022-28730—

——30——CVE-2014-0226—

——30——CVE-2018-1999002—

——30——CVE-2017-16894—

——30——CVE-2017-9769—

——30——CVE-1999-1053—

——30——CVE-2005-0773—

——30——CVE-2023-30625—

——30——CVE-2012-1424—

——30——CVE-2022-3265—

——30——CVE-2019-3799—

——30——CVE-2003-0109—

——30——CVE-2015-7858—

——30——CVE-2006-4847—

——30——CVE-2025-1098—

——30——CVE-2025-5952810.0 CRÍ

——30Flowise is a drag & drop user interface to build a customized large language model flow. In version 3.0.5, Flowise is vulnerable to remote code execution. The CustomMCP node allows users to input configuration settings for connecting to an external MCP server. This node parses the user-provided mcpServerConfig string to build the MCP server configuration. However, during this process, it executes JavaScript code without any security validation. Specifically, inside the convertToValidJSONString function, user input is directly passed to the Function() constructor, which evaluates and executes the input as JavaScript code. Since this runs with full Node.js runtime privileges, it can access dangerous modules such as child_process and fs. This issue has been patched in version 3.0.6.20d CVE-2017-9100—

——30——CVE-2023-4634—

——30——CVE-2003-0085—

——30——CVE-2021-31805—

——30——CVE-2001-0241—

——30——CVE-2018-1002105—

——30——CVE-2019-11358—

——30——CVE-2022-0306—

——30——CVE-2017-15715—

——30——CVE-2004-0330—

——30——CVE-2015-2996—

——30——CVE-2003-0533—

——30——CVE-2022-41678—

——30——CVE-2018-10661—

——30——CVE-2021-40323—