877 matches found
CVE-2022-4850
Cross-Site Request Forgery CSRF in GitHub repository usememos/memos prior to 0.9.1...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF in GitHub repository usememos/memos prior to 0.9.1...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF in GitHub repository usememos/memos prior to 0.9.1...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF in GitHub repository usememos/memos prior to 0.9.1...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF in GitHub repository usememos/memos prior to 0.9.1...
Bypassing filters to trigger XSS while creating memos
Description Stored cross-site scripting also known as second-order or persistent XSS arises when an application receives data from an untrusted source and includes that data within its later HTTP responses in an unsafe way. Payload: " Proof of Concept 1 Go to https://demo.usememos.com/ and login...
CVE-2022-4841
Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.9.1...
CVE-2022-4840
Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.9.1...
CVE-2022-4839
Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.9.1...
CSRF allows attacker trigger admin add HOST user lead to takeover memos application
Description This vuln allow attacker trigger admin submitting a malicious request to create new user with any role. Proof of Concept 1. Attacker create malicious script with csrf payload and upload it to attacker server httpx://attacker.server/csrf.html 2. Attacker send this link to memos admin 3...
CVE-2022-4841: Improper Neutralization of Input During Web Page Generation
Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.9.1...
CVE-2022-4844: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF in GitHub repository usememos/memos prior to 0.9.1...
CVE-2022-4845: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF in GitHub repository usememos/memos prior to 0.9.1...
CVE-2022-4839: Improper Neutralization of Input During Web Page Generation
Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.9.1...
CVE-2022-4840: Improper Neutralization of Input During Web Page Generation
Cross-site Scripting XSS - Stored in GitHub repository usememos/memos prior to 0.9.1...
CVE-2022-4847: Incorrectly Specified Destination in a Communication Channel
Incorrectly Specified Destination in a Communication Channel in GitHub repository usememos/memos prior to 0.9.1...
CVE-2022-4848: Improper Verification of Source of a Communication Channel
Improper Verification of Source of a Communication Channel in GitHub repository usememos/memos prior to 0.9.1...
CVE-2022-4849: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF in GitHub repository usememos/memos prior to 0.9.1...