81 matches found
PT-2026-6798
Name of the Vulnerable Software and Affected Versions Trilium Notes versions prior to 0.101.0 Description Trilium Notes is a cross-platform note taking application. A timing attack in the sync authentication endpoint allows unauthenticated remote attackers to recover HMAC authentication hashes...
EUVD-2025-23566
Malicious code in bioql PyPI...
EUVD-2021-30652
Malicious code in bioql PyPI...
CVE-2025-53544
Trilium Notes is an open-source, cross-platform hierarchical note taking application with focus on building large personal knowledge bases. In versions below 0.97.0, a brute-force protection bypass in the initial sync seed retrieval endpoint allows unauthenticated attackers to guess the login...
CVE-2025-53544
Trilium Notes is an open-source, cross-platform hierarchical note taking application with focus on building large personal knowledge bases. In versions below 0.97.0, a brute-force protection bypass in the initial sync seed retrieval endpoint allows unauthenticated attackers to guess the login...
CVE-2025-53544 Trilium Notes is Vulnerable to Brute-force Protection Bypass via Initial Sync Seed Retrieval
Trilium Notes is an open-source, cross-platform hierarchical note taking application with focus on building large personal knowledge bases. In versions below 0.97.0, a brute-force protection bypass in the initial sync seed retrieval endpoint allows unauthenticated attackers to guess the login...
CVE-2025-53544 Trilium Notes is Vulnerable to Brute-force Protection Bypass via Initial Sync Seed Retrieval
Trilium Notes is an open-source, cross-platform hierarchical note taking application with focus on building large personal knowledge bases. In versions below 0.97.0, a brute-force protection bypass in the initial sync seed retrieval endpoint allows unauthenticated attackers to guess the login...
CVE-2025-53544
CVE-2025-53544 concerns Trilium Notes prior to 0.97.0, where a brute-force protection bypass in the initial sync seed retrieval endpoint allows unauthenticated attackers to guess the login password without triggering rate limiting. The app is described as a single-user, username-less system, with...
CVE-2025-53544 Trilium Notes is Vulnerable to Brute-force Protection Bypass via Initial Sync Seed Retrieval
Trilium Notes is an open-source, cross-platform hierarchical note taking application with focus on building large personal knowledge bases. In versions below 0.97.0, a brute-force protection bypass in the initial sync seed retrieval endpoint allows unauthenticated attackers to guess the login...
PT-2025-31882 · Unknown · Trilium Notes
Name of the Vulnerable Software and Affected Versions: Trilium Notes versions prior to 0.97.0 Description: Trilium Notes is a cross-platform hierarchical note taking application. A brute-force protection bypass in the initial sync seed retrieval endpoint allows unauthenticated attackers to guess...
Trilium Notes 安全漏洞
Trilium Notes is a layered notes application by Zadam Personal Developer. It specializes in building large personal knowledge bases. A security vulnerability exists in Trilium Notes versions prior to 0.97.0, which stems from a brute force protection bypass in the initial synchronization seed...
Trilium Notes 跨站脚本漏洞
Trilium Notes is a layered notes application for Zadam Personal Developers. It specializes in building large personal knowledge bases. A cross-site scripting vulnerability exists in versions prior to Trilium Notes 0.59.4 that stems from a stored XSS vulnerability when a user creates a new note an...
Trilium Notes 跨站脚本漏洞
Trilium Notes is a layered notes application for Zadam Personal Developers. It specializes in building large personal knowledge bases. A cross-site scripting vulnerability exists in Trilium Notes version v0.53.1, which can be exploited by an attacker to perform a cross-site scripting attack on th...
Trilium Notes 跨站脚本漏洞
Trilium Notes is a layered notes application for Zadam Personal Developers. It specializes in building large personal knowledge bases. A security vulnerability exists in Trilium Notes that stems from the presence of a cross-site scripting issue...
CVE-2021-43745
A Denial of Service vulnerabilty exists in Trilium Notes 0.48.6 in the setupPage function...
CVE-2021-43745
A Denial of Service vulnerabilty exists in Trilium Notes 0.48.6 in the setupPage function...
CVE-2021-43745
A Denial of Service vulnerabilty exists in Trilium Notes 0.48.6 in the setupPage function...
Denial of service
A Denial of Service vulnerabilty exists in Trilium Notes 0.48.6 in the setupPage function...
CVE-2021-43745
A Denial of Service vulnerabilty exists in Trilium Notes 0.48.6 in the setupPage function...
CVE-2021-43745
CVE-2021-43745 describes a Denial of Service in Trilium Notes 0.48.6, specifically involving the setupPage function. The connected data confirms multiple sources (NVD, OSV, CVE lists, and third‑party repositories) document the same issue. The available details identify the vulnerable component as...