3798 matches found
Note Mark 授权问题漏洞
Note Mark is a web-based Markdown note-taking application developed by Leo Spratt. Versions of Note Mark prior to 0.19.3 had an authorization issue vulnerability. This vulnerability stemmed from the fact that notes and uploaded assets could still be accessed after public books were soft-deleted,...
PT-2026-36859
Name of the Vulnerable Software and Affected Versions Notesnook Web/Desktop versions prior to 3.3.15 Notesnook iOS/Android versions prior to 3.3.20 Description A stored Cross-Site Scripting XSS issue exists in the note export flow. The problem occurs because exported note fields, including title,...
CVE-2026-42090: Improper Neutralization of Input During Web Page Generation
Notesnook is a note-taking app focused on user privacy & ease of use. Prior to Notesnook Web/Desktop version 3.3.15 and prior to Notesnook iOS/Android version 3.3.20, a stored XSS vulnerability in the note export flow can be escalated to remote code execution in the desktop app. The root cause is...
Note Mark 授权问题漏洞
Note Mark is a web-based Markdown note-taking application developed by Leo Spratt. Version 0.19.2 of Note Mark contains an authorization vulnerability. This vulnerability stems from the IsPasswordMatch function falling back to a hardcoded bcrypt empty password placeholder, allowing unauthenticate...
CVE-2026-44522
creationtimestamp| type| source ---|---|--- 2026-05-02 14:27:54+00:00| published-proof-of-concept| https://github.com/enchant97/note-mark/security/advisories/GHSA-g49p-4qxj-88v3...
BELL-CVE-2026-43057
Bulletin has no description...
BELL-CVE-2026-43049
Bulletin has no description...
MINI-XX72-WM4V-5F5C
Bulletin has no description...
GHSA-MP3R-6558-HVG8 vulnerabilities
Vulnerabilities for packages: linux-azure, linux-qemu, linux-gcp, linux-aws, linux-vmware...
Deserialization of Untrusted Data
Overview org.apache.mina:mina-core is a network application framework which helps users develop high performance and high scalability network applications easily. Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the resolveClass function in AbstractIoBuffe...
Exploit for CVE-2026-31431
CVE-2026-31431.c This content is provided for educational pu...
Exploit for CVE-2026-31431
Copy Fail - CVE-2...
MINI-25QP-R623-PPF7
Bulletin has no description...
HPESBNW05047 rev.1 - HPE Telco Service Orchestrator Software, Multiple Vulnerabilities
Potential Security Impact: Remote: Authentication Bypass, Compromise of System Integrity, Stack Overflow SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Telco Service Orchestrator Prior to v5.6.0 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | |...
CVE-2018-25314
creationtimestamp| type| source ---|---|--- 2026-04-29 20:25:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mknwnpzlsb2o 2026-04-29 20:39:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mknxfzyb4u2c...
CGA-RP24-M6QC-6PMW
Bulletin has no description...
MINI-8J8R-X772-VC6Q
Bulletin has no description...
MINI-PQ7R-49HG-PFRP
Bulletin has no description...
JLSEC-2026-211
libmariadb/mariadblib.c in MariaDB Connector/C before 3.1.8 does not properly validate the content of an OK packet received from a server. NOTE: although mariadblib.c was originally based on code shipped for MySQL, this issue does not affect any MySQL components supported by Oracle...