CVE-2024-22891

Nteract PoC A Proof-Of-Concept for CVE-2024-22891 vulnerability. nteract 0.28.0 allows Electron webview via Markdown link, with resultant remote code execution. In this repository there is an example vulnerable application and proof-of-concept POC exploit of it. As a PoC there is a python file th...

CVE-2024-25292

RenderTune RCE Una prueba de concepto para la vulnerabilidad CVE-2024-25292. Una vulnerabilidad de cross-site scripting XSS en RenderTune v1.1.4 permite a los atacantes ejecutar scripts web arbitrarios o HTML mediante un payload manipulado inyectado en el parámetro Upload Title. En este repositor...

CVE-2022-30507-PoC

Descripción ejecución remota de código RCE mediante la ejecución de código javascript - Cross-site-scripting XSS y proceso de renderizado por nodeintegration, que es responsable del proceso de renderizado y del acceso al código node js Video PoC Referencia...

CVE-2026-100643

SiYuan versions before v3.8.4 fail to properly escape four stored Attribute View values in textarea elements, allowing authenticated attackers to inject JavaScript by modifying field descriptions, template sources, select option descriptions, or footer calculation templates. Attackers can execute...

CVE-2026-100645

SiYuan versions 3.7.0 before 3.8.4 are vulnerable to a stored cross-site scripting (XSS) flaw in the gallery and kanban database renderers. The root cause is the failure to escape field descriptions within aria-label attributes. In the Electron desktop application where nodeIntegration is enabled...

CVE-2026-100643

SiYuan versions before v3.8.4 are vulnerable to Stored XSS because they fail to properly escape four stored Attribute View values in textarea elements. An authenticated attacker can inject JavaScript by modifying field descriptions, template sources, select option descriptions, or footer calculat...

EUVD-2026-87737

SiYuan versions before v3.8.4 fail to properly escape four stored Attribute View values in textarea elements, allowing authenticated attackers to inject JavaScript by modifying field descriptions, template sources, select option descriptions, or footer calculation templates. Attackers can execute...

CVE-2026-100643 SiYuan before v3.8.4 Stored XSS via Attribute View textarea

SiYuan versions before v3.8.4 fail to properly escape four stored Attribute View values in textarea elements, allowing authenticated attackers to inject JavaScript by modifying field descriptions, template sources, select option descriptions, or footer calculation templates. Attackers can execute...

CVE-2026-100641

SiYuan versions before v3.8.4 are vulnerable to a Stored XSS flaw because they fail to HTML-escape stored flashcard block content. Specifically, content retrieved from the /api/riff/getRiffCards endpoint is inserted into app/src/card/viewCards.ts and assigned to listElement.innerHTML without prop...

EUVD-2026-87735

SiYuan before v3.8.4 does not HTML-escape stored flashcard block content before interpolating it into the card-manager list markup. Block content returned by /api/riff/getRiffCards is inserted into a card item template in app/src/card/viewCards.ts and assigned to listElement.innerHTML, so content...

CVE-2026-75917

SiYuan before v3.7.4 contains a cross-site scripting vulnerability in the file-tree picker's hover-tooltip generation app/src/util/pathName.ts, getLeaf/movePathTo used by the 'move/link to' path-selection dialogs, where document metadata fields bookmark, alias, memo, and an alternate name field a...

EUVD-2026-62442

SiYuan before v3.7.4 contains a cross-site scripting vulnerability in the file-tree picker's hover-tooltip generation app/src/util/pathName.ts, getLeaf/movePathTo used by the 'move/link to' path-selection dialogs, where document metadata fields bookmark, alias, memo, and an alternate name field a...

CVE-2026-75917 SiYuan before v3.7.4 XSS-to-RCE via pathName.ts

SiYuan before v3.7.4 contains a cross-site scripting vulnerability in the file-tree picker's hover-tooltip generation app/src/util/pathName.ts, getLeaf/movePathTo used by the 'move/link to' path-selection dialogs, where document metadata fields bookmark, alias, memo, and an alternate name field a...

CVE-2026-75917

SiYuan before v3.7.4 contains an XSS-to-RCE vulnerability in the file-tree picker's hover-tooltip generation (app/src/util/pathName.ts, getLeaf()/movePathTo()). Document metadata fields (bookmark, alias, memo, alternate name) are concatenated into the aria-label HTML attribute without escaping, a...

CVE-2026-75916 SiYuan XSS-to-RCE via unescaped block metadata in hint popup

SiYuan through 3.7.3 contains a cross-site scripting vulnerability in the '' block-reference autocomplete hint popup. In genHintItemHTML app/src/protyle/hint/extend.ts, a candidate block's name, alias, and memo fields are concatenated into the popup's HTML without escaping. An attacker who can se...

EUVD-2026-62441

SiYuan through 3.7.3 contains a cross-site scripting vulnerability in the '' block-reference autocomplete hint popup. In genHintItemHTML app/src/protyle/hint/extend.ts, a candidate block's name, alias, and memo fields are concatenated into the popup's HTML without escaping. An attacker who can se...

CVE-2026-75916

In SiYuan through 3.7.3, genHintItemHTML() in app/src/protyle/hint/extend.ts concatenates block name, alias, and memo fields into HTML without escaping, enabling XSS via '((' autocomplete popups. Combined with nodeIntegration enabled, contextIsolation disabled, and no CSP, this escalates to arbit...

PT-2026-78383

Name of the Vulnerable Software and Affected Versions SiYuan versions prior to 3.7.4 Description An issue exists in the file-tree picker's hover-tooltip generation within the getLeaf and movePathTo functions located in app/src/util/pathName.ts used by the 'move/link to' path-selection dialogs...

PT-2026-78382

Name of the Vulnerable Software and Affected Versions SiYuan versions prior to 3.7.4 Description A cross-site scripting issue exists in the '' block-reference autocomplete hint popup. The function genHintItemHTML app/src/protyle/hint/extend.ts concatenates a candidate block's name, alias, and mem...

CVE-2026-75917: Improper Neutralization of Input During Web Page Generation

SiYuan before v3.7.4 contains a cross-site scripting vulnerability in the file-tree picker's hover-tooltip generation app/src/util/pathName.ts, getLeaf/movePathTo used by the 'move/link to' path-selection dialogs, where document metadata fields bookmark, alias, memo, and an alternate name field a...