EUVD-2022-32586

Malicious code in bioql PyPI...

CVE-2022-28101

Turtlapp Turtle Note v0.7.2.6 does not filter the tag during markdown parsing, allowing attackers to execute HTML injection...

CVE-2022-28101

Turtlapp Turtle Note v0.7.2.6 does not filter the tag during markdown parsing, allowing attackers to execute HTML injection...

CVE-2022-28101

CVE-2022-28101 affects Turtlapp Turtle Note v0.7.2.6. The issue arises in markdown parsing where the application does not filter the tag, enabling HTML injection. The NVD entry lists a base score of 6.0 (MEDIUM) in CVSS2 and 9.0 (CRITICAL) in CVSS3.1, with network attack vector, low complexity, ...

CVE-2022-28101: Improper Neutralization of Input During Web Page Generation

Turtlapp Turtle Note v0.7.2.6 does not filter the tag during markdown parsing, allowing attackers to execute HTML injection...

Lyon Bros Turtlapp Turtle Note Cross-site Scripting Vulnerability

Lyon Bros Turtlapp Turtle Note is a secure, collaborative notebook from Lyon Bros. Use it to save notes, bookmarks, passwords, ideas, dream journals, photos, documents and anything else you want to keep safe. A security vulnerability exists in Turtlapp Turtle Note version v0.7.2.6, which stems fr...

PT-2022-18809

Name of the Vulnerable Software and Affected Versions Turtlapp Turtle Note version 0.7.2.6 Description The issue allows attackers to execute HTML injection due to the lack of filtering of the tag during markdown parsing. Recommendations For version 0.7.2.6, as a temporary workaround, consider...