696 matches found
CVE-2024-21635
Memos suffers from an issue where Access Tokens remain valid after a user password change, allowing a potential bad actor to continue accessing a compromised account. This affects versions up to and including 0.18.1, as tokens tied to the old password are not revoked automatically. The vulnerabil...
Memos 安全漏洞
Memos is a Memos open source open source hosted meme center with knowledge management and social features. A security vulnerability exists in Memos 0.18.1 and prior versions that stems from an access token not being invalidated after a password change, which could lead to continued account...
PT-2025-46955
Name of the Vulnerable Software and Affected Versions Memos versions up to and including 0.18.1 Description Memos is a note-taking service that utilizes Access Tokens for application authentication. A flaw exists where Access Tokens remain valid even after a user changes their password. This mean...
Arbitrary File Write
github.com/usememos/memos is vulnerable to arbitrary file write. The vulnerability is due to improper validation of file paths in the CreateResource endpoint when storing objects locally, which allows an attacker to create files with path traversal sequences and write arbitrary files on the serve...
EUVD-2022-7719
Malicious code in bioql PyPI...
EUVD-2022-7522
Malicious code in bioql PyPI...
EUVD-2023-0477
Malicious code in bioql PyPI...
EUVD-2023-0516
Malicious code in bioql PyPI...
EUVD-2023-2530
Malicious code in bioql PyPI...
EUVD-2022-7641
Malicious code in bioql PyPI...
EUVD-2024-2509
Malicious code in bioql PyPI...
EUVD-2022-7724
Malicious code in bioql PyPI...
EUVD-2025-23004
Malicious code in bioql PyPI...
EUVD-2022-7494
Malicious code in bioql PyPI...
EUVD-2023-2392
Malicious code in bioql PyPI...
EUVD-2022-7729
Malicious code in bioql PyPI...
EUVD-2024-2512
Malicious code in bioql PyPI...
EUVD-2022-7516
Malicious code in bioql PyPI...