DanSec

Vulnerability

CVE-2025-3248

In 1 brief, most recently 13 April 2025. RSS for this tag

Published 2025-04-07

Learn more: DanSec Explorer ↗ NVD ↗ CVE.org ↗ CISA KEV ↗

Known exploited (CISA KEV)

Langflow Missing Authentication Vulnerability.

Added 2025-05-05 · used in ransomware campaigns

Coverage in DanSec Daily

  1. Langflow CVE-2025-3248 exploitation, the Tycoon2FA phishing kit targeting Microsoft 365, and 'slopsquatting' supply chain risks from AI-hallucinated packages.