EUVD-2025-41921

Malicious code in surya-getuk52-sluey npm...

Linux Distros Unpatched Vulnerability : CVE-2024-41921

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A code injection vulnerability has been discovered in the Robot Operating System ROS 'rostopic' command- line tool, affecting ROS distributions Noetic Ninjemys...

CVE-2024-41921

creationtimestamp| type| source ---|---|--- 2025-07-17 19:23:50+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114870205065116436...

CVE-2024-41921

The CVE describes a code-injection vulnerability in the ROS rostopic echo command. Affected product: Robot Operating System (ROS) rostopic tool, affecting Noetic Ninjemys and earlier. Root cause: the echo verb accepts a user-supplied Python expression through --filter, and passes it directly to e...

CVE-2024-41921 Unsafe use of eval() method in rostopic echo tool

A code injection vulnerability has been discovered in the Robot Operating System ROS 'rostopic' command-line tool, affecting ROS distributions Noetic Ninjemys and earlier. The vulnerability lies in the 'echo' verb, which allows a user to introspect a ROS topic and accepts a user-provided Python...

CVE-2024-41921 Unsafe use of eval() method in rostopic echo tool

A code injection vulnerability has been discovered in the Robot Operating System ROS 'rostopic' command-line tool, affecting ROS distributions Noetic Ninjemys and earlier. The vulnerability lies in the 'echo' verb, which allows a user to introspect a ROS topic and accepts a user-provided Python...

CVE-2023-41921 Download of Code Without Integrity Check in Kiloview P1/P2 devices

A vulnerability allows attackers to download source code or an executable from a remote location and execute the code without sufficiently verifying the origin and integrity of the code. This vulnerability can allow attackers to modify the firmware before uploading it to the system, thus achievin...

Discourse < 2.9.0.beta13 Multiple Vulnerabilities

Discourse is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:discourse:discourse"; ifdescripti...

CVE-2022-41921

creationtimestamp| type| source ---|---|--- 2022-11-28 18:28:03+00:00| seen| https://t.me/cibsecurity/53583...

CVE-2022-41921 Discourse chat messages should have a maximum character limit

Discourse is an open-source discussion platform. Prior to version 2.9.0.beta13, users can post chat messages of an unlimited length, which can cause a denial of service for other users when posting huge amounts of text. Users should upgrade to version 2.9.0.beta13, where a limit has been...

CVE-2022-41921

Discourse CVE-2022-41921 affects the open-source Discourse platform prior to version 2.9.0.beta13, where chat messages could be posted with unlimited length, enabling a denial-of-service condition for other users when large text is posted. The underlying issue is the lack of a length limit in cha...

CVE-2021-41921

creationtimestamp| type| source ---|---|--- 2022-04-28 16:25:45+00:00| seen| https://t.me/cibsecurity/41566...

CVE-2021-41921

CVE-2021-41921 affects novel-plus v3.6.1, where unrestricted uploads (suffixes and contents) enable server attacks and arbitrary code execution. The connected PT-2022-11503 entry confirms the issue stems from allowing unrestricted file uploads and recommends strict file type validation, content c...