CVE-2025-41242

Spring Framework MVC applications can be vulnerable to a “Path Traversal Vulnerability” when deployed on a non-compliant Servlet container. An application can be vulnerable when all the following are true: the application is deployed as a WAR or with an embedded Servlet container the Servlet...

MAL-2025-41242 Malicious code in zzcnativeapi (npm)

The package zzcnativeapi was found to contain malicious code...

CVE-2025-41242

creationtimestamp| type| source ---|---|--- 2025-08-14 08:38:13+00:00| seen| https://bsky.app/profile/snicoll.be/post/3lwdwst27bc2s 2025-08-15 02:23:07+00:00| seen| https://bsky.app/profile/pmloik.bsky.social/post/3lwfscvrt7h2d 2025-08-18 12:17:46+00:00| seen|...

CVE-2023-41242

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Hassan Ali Snap Pixel plugin = 1.5.7 versions...

CVE-2024-41242

creationtimestamp| type| source ---|---|--- 2024-08-07 21:10:13+00:00| seen| https://t.me/cvedetector/2731...

CVE-2024-41242

A Reflected Cross Site Scripting XSS vulnerability was found in /smsa/studentlogin.php in Kashipara Responsive School Management System v3.2.0, which allows remote attackers to execute arbitrary code via "error" parameter...

CVE-2024-41242

A Reflected Cross Site Scripting XSS vulnerability was found in /smsa/studentlogin.php in Kashipara Responsive School Management System v3.2.0, which allows remote attackers to execute arbitrary code via "error" parameter...

CVE-2023-41242

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Hassan Ali Snap Pixel plugin = 1.5.7 versions...

CVE-2023-41242

CVE-2023-41242 refers to the WordPress Snap Pixel plugin and is a Stored Cross-Site Scripting (XSS) vulnerability affecting versions

WordPress Snap Pixel Plugin <= 1.5.7 is vulnerable to Cross Site Scripting (XSS)

Software Snap Pixel Type Plugin Vulnerable versions = 1.5.7 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-41242 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 81eb2fe06a20 Credits Rio Darmawan Required privileg...

CVE-2022-41242

A missing permission check in Jenkins extreme-feedback Plugin 1.7 and earlier allows attackers with Overall/Read permission to discover information about job names attached to lamps, discover MAC and IP addresses of existing lamps, and rename lamps...

CVE-2022-41242

A missing permission check in Jenkins extreme-feedback Plugin 1.7 and earlier allows attackers with Overall/Read permission to discover information about job names attached to lamps, discover MAC and IP addresses of existing lamps, and rename lamps...

CVE-2022-41242

A missing permission check in Jenkins extreme-feedback Plugin 1.7 and earlier allows attackers with Overall/Read permission to discover information about job names attached to lamps, discover MAC and IP addresses of existing lamps, and rename lamps...

CVE-2022-41242

CVE-2022-41242 affects Jenkins extreme-feedback Plugin 1.7 and earlier. Root cause: missing authorization check in an HTTP endpoint, allowing attackers with Overall/Read permission to enumerate lamp-related data (job names, MAC/IP addresses) and rename lamps. Impact is information disclosure and ...

CVE-2021-41242

creationtimestamp| type| source ---|---|--- 2021-12-11 02:25:28+00:00| seen| https://t.me/cibsecurity/33767...

CVE-2021-41242

OpenOlat (web-based LMS) has a path traversal vulnerability in REST methods that allow an attacker with a user account and enabled REST API to craft a filename containing a relative path, enabling write access to files anywhere under the web root or beyond depending on server configuration. Affec...