PT-2026-99309

Name of the Vulnerable Software and Affected Versions SiYuan versions prior to 3.8.4 Description An issue exists in the 'setNotebookIcon' endpoint that allows authenticated administrators to perform path traversal, a technique used to access files and directories that are stored outside the web...

CVE-2024-53504

A SQL injection vulnerability has been identified in Siyuan 3.1.11 via the notebook parameter in /searchHistory...

PT-2024-35764

Name of the Vulnerable Software and Affected Versions Siyuan version 3.1.11 Description A SQL injection issue has been identified in the notebook parameter through the "/searchHistory" API endpoint. This allows for potential exploitation. No information is provided about the estimated number of...

CVE-2024-53504

A SQL injection vulnerability has been identified in Siyuan 3.1.11 via the notebook parameter in /searchHistory...

CVE-2024-53504

A SQL injection vulnerability has been identified in Siyuan 3.1.11 via the notebook parameter in /searchHistory...

CVE-2024-53504

A SQL injection vulnerability has been identified in Siyuan 3.1.11 via the notebook parameter in /searchHistory...

CVE-2024-53504

A SQL injection vulnerability exists in Siyuan version 3.1.11 . The flaw is triggered through the notebook parameter in the /searchHistory file. This vulnerability allows for the improper neutralization of special elements used in an SQL command. Exploitation details or specific remediation steps...

CVE-2024-53504: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability has been identified in Siyuan 3.1.11 via the notebook parameter in /searchHistory...