Posts

Showing posts with the label dos

n8n – CVE-2025-68613: Critical RCE Vulnerability

Image
    A critical vulnerability ( CVE-2025-68613 ) has been identified in n8n , the popular workflow automation tool. The flaw lies in the expression evaluation system, where user-supplied expressions can escape the sandbox and access Node.js internals. This leads to arbitrary code execution with a CVSS score of 9.9 (Critical) .      n8n is an open source workflow automation platform. Versions starting with 0.211.0 and prior to 1.120.4, 1.121.1, and 1.122.0 contain a critical Remote Code Execution (RCE) vulnerability in their workflow expression evaluation system. Under certain conditions, expressions supplied by authenticated users during workflow configuration may be evaluated in an execution context that is not sufficiently isolated from the underlying runtime. An authenticated attacker could abuse this behavior to execute arbitrary code with the privileges of the n8n process. Successful exploitation may lead to full compromise of the affected instance,...

Unusual Traffic, Unexpected Chaos: The Truth Behind the Cloudflare Outage

Image
Cloudflare's Global Outage: Understanding the Root Cause Behind the September 18 Network Disruption On 18 September, the world witnessed a sudden and widespread slowdown of the internet. Websites and applications depending on Cloudflare ranging from social networks to API driven platforms began returning Internal Server Error messages. Millions of users assumed it was a cyberattack, a DDoS event, or a breach. However, the truth behind the outage was far more nuanced and rooted in Cloudflare’s internal architecture. This blog breaks down what Cloudflare does, why bot mitigation plays a critical role, how an unexpected configuration file led to an internal service crash, and why “unusual traffic” triggered a global ripple. What Cloudflare Really Does for the Internet Cloudflare is more than a simple CDN or firewall it is a massive reverse-proxy network that sits between users and websites. It accelerates content delivery, filters malicious traffic, provides DNS services, manage...