Vulnerability intelligence

CVE-2025-59528 identifies a remote code execution (RCE) vulnerability in Flowise, a drag-and-drop user interface for building large language model flows. Specifically, versions 3.0.5, and those ranging from 2.2.7-patch.1 to earlier than 3.0.6, are affected. The flaw resides within the `CustomMCP` node, which processes user-provided configuration settings for external MCP servers. The vulnerability occurs because the `convertToValidJSONString` function, used to parse the `mcpServerConfig` string, directly passes user input to JavaScript's `Function()` constructor without adequate security validation. This allows the input to be executed as JavaScript code with full Node.js runtime privileges, enabling attackers to execute arbitrary code on the server. This issue has been addressed in Flowise version 3.0.6.

CVE-2023-20869 is a stack-based buffer overflow vulnerability found in VMware Workstation (17.x) and VMware Fusion (13.x). It exists in the functionality that shares host Bluetooth devices with the virtual machine. The vulnerability was reported by STAR Labs during the Pwn2Own 2023 Security Contest and publicly disclosed on April 25, 2023. An attacker with local administrative privileges on a virtual machine could exploit this vulnerability to execute code as the virtual machine's VMX process running on the host. This could lead to complete compromise of the hypervisor. The vulnerability exists within the UHCI component and stems from inadequate validation of user-supplied data length before copying it to a fixed-length stack-based buffer.

CVE-2023-20870 is an out-of-bounds read vulnerability found in VMware Workstation and Fusion. It exists in the functionality for sharing host Bluetooth devices with the virtual machine. An attacker with local administrative privileges on a virtual machine could exploit this vulnerability to read privileged information contained in hypervisor memory.

A code injection in Ivanti Endpoint Manager Mobile allowing attackers to achieve unauthenticated remote code execution.

A improper access control vulnerability in Fortinet FortiClientEMS 7.4.5 through 7.4.6 may allow an unauthenticated attacker to execute unauthorized code or commands via crafted requests.

TrueConf Client downloads application update code and applies it without performing verification. An attacker who is able to influence the update delivery path can substitute a tampered update payload. If the payload is executed or installed by the updater, this may result in arbitrary code execution in the context of the updating process or user.