CVE-2025-7124: Unrestricted Upload of File with Dangerous Type

A vulnerability classified as critical has been found in code-projects Online Note Sharing 1.0. Affected is an unknown function of the file /dashboard/userprofile.php of the component Profile Image Handler. The manipulation of the argument image leads to unrestricted upload. It is possible to...

CVE-2025-48911

Vulnerability of improper permission assignment in the note sharing module Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2025-48911

Vulnerability of improper permission assignment in the note sharing module Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2025-48911

Vulnerability of improper permission assignment in the note sharing module Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2025-48911

Vulnerability of improper permission assignment in the note sharing module Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2025-48911

Vulnerability of improper permission assignment in the note sharing module Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2025-48911

CVE-2025-48911 is associated with Huawei/HarmonyOS and is described as a vulnerability in the note sharing module caused by improper permission assignments. Multiple sources (NVD, RH, CNVD/CNNVD) consistently indicate the issue impacts HarmonyOS 5.0.0 and may affect availability if exploited, wit...

PT-2025-24030 · Huawei · Harmonyos

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue concerns a vulnerability of improper permission assignment in the note sharing module. Successful exploitation of this vulnerability may affect availability. Recommendations: At th...

CVE-2025-48911: Incorrect Privilege Assignment

Vulnerability of improper permission assignment in the note sharing module Impact: Successful exploitation of this vulnerability may affect availability...

Typora 0.9.9.24.6 - Directory Traversal Vulnerability

Exploit Title: Code execution via path traversal Exploit Author: Dhiraj Mishra Vendor Homepage: http://typora.io Software Link: https://typora.io/download/Typora.dmg Version: 0.9.9.24.6 Tested on: macOS Mojave v10.14.4 CVE: CVE-2019-12137 References: https://nvd.nist.gov/vuln/detail/CVE-2019-1213...

CVE-2018-19286

The server in mubu note 2018-11-11 has XSS by configuring an account with a crafted name value along with an arbitrary username value, and then creating and sharing a note...

CVE-2018-19286

CVE-2018-19286 describes an XSS vulnerability in the mubu note server. An attacker can trigger XSS by configuring an account with a crafted name value (together with an arbitrary username) when creating and sharing a note, enabling the attacker to inject script via the name field. The NVD summary...

PT-2018-14904

Name of the Vulnerable Software and Affected Versions mubu note version 2018-11-11 Description The issue allows for XSS by configuring an account with a crafted name value, along with an arbitrary username value, and then creating and sharing a note. Recommendations For mubu note version...