PT-2024-36311 · Evernote · Evernote Sync

Name of the Vulnerable Software and Affected Versions: Evernote Sync versions prior to 3.0.0 Description: The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting', which allows reflected XSS. Recommendations: For versions prior to...

WordPress Evernote Sync plugin <= 3.0.0 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Muhamad Agil Fachrian Patchstack Alliance in WordPress Plugin Evernote Sync versions = 3.0.0...

MAL-2024-10313 Malicious code in evernote-thrift (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0cafc1fbe5d3aca2d0d736873649060e6c9dce551db713b3d91723a78f9a2f22 The OpenSSF Package Analysis project identified 'evernote-thrift' @ 1.4.8 npm as malicious. It is considered malicious because: - The package...

Malicious code in evernote-thrift (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0cafc1fbe5d3aca2d0d736873649060e6c9dce551db713b3d91723a78f9a2f22 The OpenSSF Package Analysis project identified 'evernote-thrift' @ 1.4.8 npm as malicious. It is considered malicious because: - The package...

Beware: GitHub's Fake Popularity Scam Tricking Developers into Downloading Malware

Threat actors are now taking advantage of GitHub's search functionality to trick unsuspecting users looking for popular repositories into downloading spurious counterparts that serve malware. The latest assault on the open-source software supply chain involves concealing malicious code within...

The vulnerability of the RunAsNode and enableNodeClilnspectArguments components of the software for creating and storing Evernote notes on MacOS allows a hacker to execute arbitrary code.

The vulnerability of the RunAsNode and enableNodeClilnspectArguments components of the software used for creating and storing Evernote notes on MacOS is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a malicious actor to execute...

Malicious code in evernote-ink (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b1bb0fa89469e954b9d89954d3a58ff3a98cd66a1c11a183a7ce82bbc6e89fbe The OpenSSF Package Analysis project identified 'evernote-ink' @ 1.0.207 npm as malicious. It is considered malicious because: - The package...

MAL-2024-990 Malicious code in evernote-ink (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b1bb0fa89469e954b9d89954d3a58ff3a98cd66a1c11a183a7ce82bbc6e89fbe The OpenSSF Package Analysis project identified 'evernote-ink' @ 1.0.207 npm as malicious. It is considered malicious because: - The package...

CVE-2023-50643

An issue in Evernote Evernote for MacOS v.10.68.2 allows a remote attacker to execute arbitrary code via the RunAsNode and enableNodeClilnspectArguments components...

CVE-2023-50643

An issue in Evernote Evernote for MacOS v.10.68.2 allows a remote attacker to execute arbitrary code via the RunAsNode and enableNodeClilnspectArguments components...

Code injection

An issue in Evernote Evernote for MacOS v.10.68.2 allows a remote attacker to execute arbitrary code via the RunAsNode and enableNodeClilnspectArguments components...

CVE-2023-50643

An issue in Evernote Evernote for MacOS v.10.68.2 allows a remote attacker to execute arbitrary code via the RunAsNode and enableNodeClilnspectArguments components...

Evernote Security Breach

Evernote Impression Notes is a suite of note-taking software for the macOS platform from the American company Evernote. The software allows you to create, manage, synchronize, search and share notes anytime, anywhere. A security vulnerability exists in Evernote macOS version v.10.68.2, which...

CVE-2023-50643

An issue in Evernote Evernote for MacOS v.10.68.2 allows a remote attacker to execute arbitrary code via the RunAsNode and enableNodeClilnspectArguments components...

CVE-2023-50643

CVE-2023-50643 affects Evernote for macOS (v10.68.2) with a vulnerability in the RunAsNode and enableNodeClilnspectArguments components that could allow a remote attacker to execute arbitrary code. The linked sources (NVD/Red Hat) describe a remote code execution impact with a CVSS v3.1 base scor...

PT-2024-1677

Name of the Vulnerable Software and Affected Versions Evernote for MacOS version 10.68.2 Description An issue in Evernote for MacOS allows a remote attacker to execute arbitrary code via the RunAsNode and enableNodeClilnspectArguments components. This is related to a buffer overflow in memory. Th...

Evernote Web Clipper Same-Origin Policy Bypass Vulnerability

Evernote Web Clipper suffered from a same-origin policy bypass vulnerability. The link to the demo exploit was a 403 at the time of addition and has not been included in this post. Evernote: extension allows cross-origin iframe communication I happened to notice that the Evernote Web Clipper...

Malicious code in evernote-sdk-sample-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ff8378dcd0078ecaa733a9b360f13732b44b784da338ad9421036071fb5ce742 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2898 Malicious code in evernote-sdk-sample-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ff8378dcd0078ecaa733a9b360f13732b44b784da338ad9421036071fb5ce742 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview evernote-thrift is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package w...