CVE-2023-40641

In Messaging, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed...

EUVD-2025-40641

Malicious code in andi-takokak2-ruro npm...

CVE-2025-40641

creationtimestamp| type| source ---|---|--- 2025-09-08 15:04:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lydi2cp6h42r...

MAL-2025-40641 Malicious code in yucca-falcon-eto835-project (npm)

The package yucca-falcon-eto835-project was found to contain malicious code...

CVE-2024-40641

Nuclei is a fast and customizable vulnerability scanner based on simple YAML based DSL. In affected versions it a way to execute code template without -code option and signature has been discovered. Some web applications inherit from Nuclei and allow users to edit and execute workflow files. In...

CVE-2024-40641 Unsigned code template execution through workflows in projectdiscovery/nuclei

Nuclei is a fast and customizable vulnerability scanner based on simple YAML based DSL. In affected versions it a way to execute code template without -code option and signature has been discovered. Some web applications inherit from Nuclei and allow users to edit and execute workflow files. In...

CVE-2024-40641 Unsigned code template execution through workflows in projectdiscovery/nuclei

Nuclei is a fast and customizable vulnerability scanner based on simple YAML based DSL. In affected versions it a way to execute code template without -code option and signature has been discovered. Some web applications inherit from Nuclei and allow users to edit and execute workflow files. In...

CVE-2024-40641

creationtimestamp| type| source ---|---|--- 2024-07-17 17:19:36+00:00| published-proof-of-concept| https://github.com/projectdiscovery/nuclei/security/advisories/GHSA-c3q9-c27p-cw9h 2024-07-17 20:44:02+00:00| seen| https://t.me/cvedetector/1111...

CVE-2023-40641

The vulnerability CVE-2023-40641 affects the Messaging component (notably on UNISOC chipsets per linked sources). The issue is a missing permission check in Messaging which could allow local information disclosure without requiring additional execution privileges. The cited sources collectively d...

CVE-2022-40641

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

CVE-2022-40641

CVE-2022-40641 affects Ansys SpaceClaim 2022 R1. The issue is an out-of-bounds write in the parsing of X_B files, caused by inadequate validation of user-supplied data, which can allow code execution in the context of the current process. Exploitation requires user interaction (the target must vi...