PT-2026-41601

Summary Access tokens created with the "never expire" option have no exp JWT claim. Three independent revocation mechanisms fail for this token type. Logout at internal/handler/auth/auth.go:154 and :163 dereferences claims.ExpiresAt.Time, panicking on the nil field so the token never hits the...

CVE-2024-41601

Insecure Permissions vulnerability in lin-CMS v.0.2.0 and before allows a remote attacker to obtain sensitive information via the login method in the UserController.java component...

CVE-2022-41601

The phones have the heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application TA.Successful exploitation of this vulnerability may affect the fingerprint service...

CVE-2024-41601

Insecure Permissions vulnerability in lin-CMS v.0.2.0 and before allows a remote attacker to obtain sensitive information via the login method in the UserController.java component...

CVE-2023-41601

CSZ CMS CVE-2023-41601 affects CSZ CMS v1.3.0 with multiple XSS vulnerabilities in install/index.php, exploitable via crafted payloads in the Database Username or Database Host fields. Root cause described as improper handling of these parameters leading to script/HTML injection. Documented impac...

CVE-2022-41601

creationtimestamp| type| source ---|---|--- 2022-10-14 20:35:07+00:00| seen| https://t.me/cibsecurity/51466...

CVE-2022-41601

CVE-2022-41601 describes heap overflow, out-of-bounds read, and null pointer vulnerabilities in the fingerprint trusted application (TA) on Huawei HarmonyOS phones. The issue affects the fingerprint service via the TA, with a low overall severity (CVSSv3.1 base score 3.4; LOCAL access, HIGH privi...