773 PoCs | 119 CISA KEV

tag

Javascript-Injection

Flowise CustomMCP Unauthenticated Remote Code Execution via Function() Constructor (CVE-2025-59528) EPSS 87%

CVE-2025-59528 web Patched

CVE-2025-59528webCRITICAL 10Patched2026-07-06OpenRemote — Expression Injection RCE in Rules Engine (CVE-2026-39842)

CVE-2026-39842 / GHSA-7mqr-33rv-p3mp web Patched

CVE-2026-39842 / GHSA-7mqr-33rv-p3mpwebCRITICAL 10Patched2026-07-05DbGate Unauthenticated RCE via JSON Script Runner (CVE-2026-47668)

CVE-2026-47668 web Patched

CVE-2026-47668webCRITICAL 3.1Patched2026-07-05