697 matches found
GHSA-33M8-F4HW-WM3Q usememos/memos Denial of Service vulnerability
Denial of Service in GitHub repository usememos/memos 0.9.0 and prior. A patch is available on the main branch at commit number f888c628408501daf639de07b90a72ab443b0f4c...
CVE-2022-4767
Denial of Service in GitHub repository usememos/memos prior to 0.9.1...
CVE-2022-4691
Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.9.0...
CVE-2022-4694
Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.9.0...
Cross site scripting
Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.9.0...
Denial of service
Denial of Service in GitHub repository usememos/memos prior to 0.9.1...
Cross-Site Scripting (XSS)
github.com/usememos/memos is vulnerability to Cross-Site Scripting XSS. The vulnerability exists in server.go because when a svg file containing malicious data is uploaded it will not filter the content of the uploaded files and will be triggered when the user accesses...
Cross-site Scripting (XSS)
github.com/usememos/memos is vulnerable to cross site scripting. The vulnerability exists in the NewServer function of server.go because of a image direct link due to improper user-input sanitization by uploading a malicious svg file...
memos 信息泄露漏洞
memos is an open source hosted memo center with knowledge management and social features. An information disclosure vulnerability exists in versions of memos prior to 0.9.1, which arises from the exposure of sensitive information to unauthorized actors...
CVE-2022-4767 Denial of Service in usememos/memos
Denial of Service in GitHub repository usememos/memos prior to 0.9.1...
memos 跨站脚本漏洞
memos is an open source hosted memo center with knowledge management and social features. A cross-site scripting vulnerability exists in memos, which can be exploited by an attacker to be able to steal a user's cookie...
CVE-2022-4767 Denial of Service in usememos/memos
Denial of Service in GitHub repository usememos/memos prior to 0.9.1...
memos 跨站脚本漏洞
memos is an open source hosted memo center with knowledge management and social features. A cross-site scripting vulnerability exists in memos, which originates when a user uploads a file with the extension .svg and accesses it directly, the server responds with Content-type: image/svg+xml causin...
PT-2022-28081 · Unknown · Usememos/Memos
Name of the Vulnerable Software and Affected Versions: usememos/memos versions prior to 0.9.1 Description: The issue is a Denial of Service vulnerability in the GitHub repository usememos/memos. A patch is available on the main branch at commit number f888c628408501daf639de07b90a72ab443b0f4c...
memos 跨站脚本漏洞
memos is an open source hosted meme center with knowledge management and social features. A cross-site scripting vulnerability exists in memos that stems from stored XSS when creating a new post in usememos memos...
CVE-2022-4767 Denial of Service in usememos/memos
Denial of Service in GitHub repository usememos/memos prior to 0.9.1...
CVE-2022-4767
The CVE-2022-4767 entry concerns a Denial of Service vulnerability in the GitHub repository usememos/memos, affecting versions prior to 0.9.1. The underlying issue is triggered in legacy releases and can impact availability. A patched version is available; remediation is to upgrade to 0.9.1 or la...
memos 资源管理错误漏洞
memos is an open source hosted memo center with knowledge management and social features. A resource management error vulnerability exists in versions of memos prior to 0.9.1, which stems from a denial of service...
An attacker can be post message in other memos page
Description An attacker can be post malicious content to other user's memos page via POST request, attacker just add an creatorID into body request and send it with Burpsuite Here is video poc: https://drive.google.com/file/d/1dNKo-ybfguam4YdvmluYujN2nkTG5D9G/view?usp=sharelink Proof of Concept...
CVE-2022-4734 Improper Removal of Sensitive Information Before Storage or Transfer in usememos/memos
Improper Removal of Sensitive Information Before Storage or Transfer in GitHub repository usememos/memos prior to 0.9.1...