878 matches found
CVE-2024-21635 Memos Access Tokens Stay Valid after User Password Change
Memos is a privacy-first, lightweight note-taking service that uses Access Tokens to authenticate application access. When a user changes their password, the existing list of Access Tokens stay valid instead of expiring. If a user finds that their account has been compromised, they can update the...
CVE-2024-21635 Memos Access Tokens Stay Valid after User Password Change
Memos is a privacy-first, lightweight note-taking service that uses Access Tokens to authenticate application access. When a user changes their password, the existing list of Access Tokens stay valid instead of expiring. If a user finds that their account has been compromised, they can update the...
CVE-2024-21635 Memos Access Tokens Stay Valid after User Password Change
Memos is a privacy-first, lightweight note-taking service that uses Access Tokens to authenticate application access. When a user changes their password, the existing list of Access Tokens stay valid instead of expiring. If a user finds that their account has been compromised, they can update the...
PT-2025-46955
Name of the Vulnerable Software and Affected Versions Memos versions up to and including 0.18.1 Description Memos is a note-taking service that utilizes Access Tokens for application authentication. A flaw exists where Access Tokens remain valid even after a user changes their password. This mean...
Memos 安全漏洞
Memos is a Memos open source open source hosted meme center with knowledge management and social features. A security vulnerability exists in Memos 0.18.1 and prior versions that stems from an access token not being invalidated after a password change, which could lead to continued account...
CVE-2024-21635: Improper Authentication
Memos is a privacy-first, lightweight note-taking service that uses Access Tokens to authenticate application access. When a user changes their password, the existing list of Access Tokens stay valid instead of expiring. If a user finds that their account has been compromised, they can update the...
Arbitrary File Write
github.com/usememos/memos is vulnerable to arbitrary file write. The vulnerability is due to improper validation of file paths in the CreateResource endpoint when storing objects locally, which allows an attacker to create files with path traversal sequences and write arbitrary files on the serve...
EUVD-2023-0477
Malicious code in bioql PyPI...
EUVD-2025-30589
Malicious code in bioql PyPI...
EUVD-2023-2434
Malicious code in bioql PyPI...
EUVD-2023-2392
Malicious code in bioql PyPI...
EUVD-2022-7577
Malicious code in bioql PyPI...
EUVD-2022-7494
Malicious code in bioql PyPI...
EUVD-2024-2545
Malicious code in bioql PyPI...
EUVD-2022-7522
Malicious code in bioql PyPI...
EUVD-2022-7718
Malicious code in bioql PyPI...
EUVD-2023-0581
Malicious code in bioql PyPI...
EUVD-2022-7755
Malicious code in bioql PyPI...