EUVD-2025-41994

Malicious code in rudi-tek22-miaww npm...

CVE-2022-41994

Stored cross-site scripting vulnerability in Permission Settings of baserCMS versions prior to 4.7.2 allows a remote authenticated attacker with an administrative privilege to inject an arbitrary script...

CVE-2023-41994

creationtimestamp| type| source ---|---|--- 2024-01-21 09:36:27+00:00| seen| https://t.me/ctinow/170785...

CVE-2023-41994

CVE-2023-41994 affects macOS via a logic issue in CoreMedia where a camera extension may access the camera view from apps other than the one granted permission. The issue is fixed in macOS Sonoma 14. Root cause: insufficient access checks in CoreMedia. Impact: potential exposure of camera view; e...

CVE-2022-41994

Stored cross-site scripting vulnerability in Permission Settings of baserCMS versions prior to 4.7.2 allows a remote authenticated attacker with an administrative privilege to inject an arbitrary script...

CVE-2022-41994

CVE-2022-41994 is a stored XSS vulnerability in baserCMS, affecting versions prior to 4.7.2. The issue resides in Permission Settings and can be exploited by a remote authenticated attacker with administrative privileges to inject arbitrary script. Affected software is baserCMS; root cause is sto...

GHSA-395X-WV32-44V5 baserproject/basercms vulnerable to cross-site scripting (XSS) vulnerability

There is a cross-site scripting vulnerability on the management system of baserCMS. This is a vulnerability that needs to be addressed when the management system is used by an unspecified number of users. If you are eligible, please update to the new version as soon as possible. Target baserCMS...

CVE-2021-41994

creationtimestamp| type| source ---|---|--- 2022-05-01 02:26:23+00:00| seen| https://t.me/cibsecurity/41694...

CVE-2021-41994

A misconfiguration of RSA in PingID iOS app prior to 1.19 is vulnerable to pre-computed dictionary attacks, leading to an offline MFA bypass when using PingID Windows Login...

CVE-2021-41994

The CVE-2021-41994 entry concerns PingID: an RSA misconfiguration in the PingID iOS app prior to 1.19. This flaw enables pre-computed dictionary attacks, leading to an offline MFA bypass when using PingID Windows Login. Affected component: PingID iOS app (pre-1.19); root cause: RSA misconfigurati...