EUVD-2025-41446

Malicious code in candra-toge53-sluey npm...

de.eonas.portal.demo:content (=0.1), de.eonas.portal.demo:templates (=0.1) +107 more potentially affected by CVE-2024-41446 via org.opencms:opencms-core (>=8.0.1 <=9.5.3)

org.opencms:opencms-core MAVEN version =8.0.1, =8.5.1.1, =8.5.1.1, =8.0.1, =8.0.1, =8.0.4, =8.5.0, =8.0.1, =8.0.1, =8.0.1, =8.0.1, =8.0.1, =8.5.0, =8.5.2 and more Source cves: CVE-2024-41446 Source advisory: SNYK:JAVA-ORGOPENCMS-9802335...

CVE-2024-41446

creationtimestamp| type| source ---|---|--- 2025-04-21 14:54:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lndgahzxwr2b 2025-04-21 15:02:45+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12667 2025-04-21 18:09:25+00:00| seen|...

CVE-2024-41446

The CVE-2024-41446 entry concerns a stored XSS in Alkacon OpenCMS v17.0. The vulnerability affects the image parameter under the Create/Modify article function, allowing an attacker to inject arbitrary web scripts or HTML and potentially execute them in a victim’s browser. The provided technical ...

CVE-2024-41446

A stored cross-site scripting XSS vulnerability in Alkacon OpenCMS v17.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the image parameter under the Create/Modify article function...

CVE-2023-41446

Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted script to the title parameter in the index.php component...

CVE-2023-41446

CVE-2023-41446 affects phpkobo AjaxNewTicker version 1.0.5. The vulnerability is a Cross Site Scripting flaw in the index.php component, exploitable via a crafted script in the title parameter to trigger arbitrary code execution. The NVD/CVE entry rates it as CVSS v3.1 Base Score 6.1 (Medium) wit...

CVE-2022-41446

creationtimestamp| type| source ---|---|--- 2022-11-23 07:13:54+00:00| seen| https://t.me/cibsecurity/53401 2026-07-29 12:00:56+00:00| seen| https://t.me/CVEhub/4386 2026-07-30 00:01:34+00:00| seen| https://t.me/CVEhub/4386 2026-07-31 22:00:03+00:00| published-proof-of-concept|...

CVE-2022-41446

CVE-2022-41446 is an access control vulnerability in Record Management System using CodeIgniter v1.0. The issue resides in /Admin/dashboard.php, enabling attackers to access and modify user data due to improper access control. Affects CodeIgniter-based Teachers/Record Management System v1.0; CVSS...

CVE-2021-41446

...

CVE-2021-41446

CVE-2021-41446 entry is rejected/not used; it does not represent an active vulnerability.

Outlook ATTACH_BY_REF_ONLY File Execution

$Id: ms10045outlookrefonly.rb 9926 2010-07-25 17:31:04Z hdm $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...