120 matches found
CVE-2025-53544
Trilium Notes is an open-source, cross-platform hierarchical note taking application with focus on building large personal knowledge bases. In versions below 0.97.0, a brute-force protection bypass in the initial sync seed retrieval endpoint allows unauthenticated attackers to guess the login...
CVE-2025-53544
Trilium Notes is an open-source, cross-platform hierarchical note taking application with focus on building large personal knowledge bases. In versions below 0.97.0, a brute-force protection bypass in the initial sync seed retrieval endpoint allows unauthenticated attackers to guess the login...
CVE-2025-53544 Trilium Notes is Vulnerable to Brute-force Protection Bypass via Initial Sync Seed Retrieval
Trilium Notes is an open-source, cross-platform hierarchical note taking application with focus on building large personal knowledge bases. In versions below 0.97.0, a brute-force protection bypass in the initial sync seed retrieval endpoint allows unauthenticated attackers to guess the login...
CVE-2025-53544 Trilium Notes is Vulnerable to Brute-force Protection Bypass via Initial Sync Seed Retrieval
Trilium Notes is an open-source, cross-platform hierarchical note taking application with focus on building large personal knowledge bases. In versions below 0.97.0, a brute-force protection bypass in the initial sync seed retrieval endpoint allows unauthenticated attackers to guess the login...
CVE-2025-53544
CVE-2025-53544 concerns Trilium Notes prior to 0.97.0, where a brute-force protection bypass in the initial sync seed retrieval endpoint allows unauthenticated attackers to guess the login password without triggering rate limiting. The app is described as a single-user, username-less system, with...
CVE-2025-53544 Trilium Notes is Vulnerable to Brute-force Protection Bypass via Initial Sync Seed Retrieval
Trilium Notes is an open-source, cross-platform hierarchical note taking application with focus on building large personal knowledge bases. In versions below 0.97.0, a brute-force protection bypass in the initial sync seed retrieval endpoint allows unauthenticated attackers to guess the login...
PT-2025-31882 · Unknown · Trilium Notes
Name of the Vulnerable Software and Affected Versions: Trilium Notes versions prior to 0.97.0 Description: Trilium Notes is a cross-platform hierarchical note taking application. A brute-force protection bypass in the initial sync seed retrieval endpoint allows unauthenticated attackers to guess...
Trilium Notes 安全漏洞
Trilium Notes is a layered notes application by Zadam Personal Developer. It specializes in building large personal knowledge bases. A security vulnerability exists in Trilium Notes versions prior to 0.97.0, which stems from a brute force protection bypass in the initial synchronization seed...
CVE-2023-3067
Cross-site Scripting XSS - Stored in GitHub repository zadam/trilium prior to 0.59.4...
CVE-2022-2290
Cross-site Scripting XSS - Reflected in GitHub repository zadam/trilium prior to 0.52.4, 0.53.1-beta...
CVE-2023-3067
Cross-site Scripting XSS - Stored in GitHub repository zadam/trilium prior to 0.59.4...
CVE-2023-3067
Cross-site Scripting XSS - Stored in GitHub repository zadam/trilium prior to 0.59.4...
CVE-2023-3067 Cross-site Scripting (XSS) - Stored in zadam/trilium
Cross-site Scripting XSS - Stored in GitHub repository zadam/trilium prior to 0.59.4...
Trilium Notes 跨站脚本漏洞
Trilium Notes is a layered notes application for Zadam Personal Developers. It specializes in building large personal knowledge bases. A cross-site scripting vulnerability exists in versions prior to Trilium Notes 0.59.4 that stems from a stored XSS vulnerability when a user creates a new note an...
CVE-2023-3067 Cross-site Scripting (XSS) - Stored in zadam/trilium
Cross-site Scripting XSS - Stored in GitHub repository zadam/trilium prior to 0.59.4...
CVE-2023-3067 Cross-site Scripting (XSS) - Stored in zadam/trilium
Cross-site Scripting XSS - Stored in GitHub repository zadam/trilium prior to 0.59.4...
CVE-2023-3067
CVE-2023-3067 is a stored XSS vulnerability affecting Trilium Notes (zadam/trilium) in versions prior to 0.59.4. The issue arises from a stored XSS condition when a user creates a note and its name (title) is rendered in the UI (Note Map functionality), allowing scripts to be stored and later exe...
XSS to RCE found in Trilium
Vulnerability Type Remote Code Execution RCE Authentication Required? No Affected Location - Search Notes Search Ancestor Output - Jump to Note Search Note Output - New Tab Search Notes Output Issue Summary The application contains a vulnerability where HTML characters within the title name of...