EUVD-2024-51982

Malicious code in bioql PyPI...

CVE-2024-53504

A SQL injection vulnerability has been identified in Siyuan 3.1.11 via the notebook parameter in /searchHistory...

CVE-2024-53504

A SQL injection vulnerability has been identified in Siyuan 3.1.11 via the notebook parameter in /searchHistory...

CVE-2024-53504

A SQL injection vulnerability has been identified in Siyuan 3.1.11 via the notebook parameter in /searchHistory...

CVE-2024-53504

A SQL injection vulnerability has been identified in Siyuan 3.1.11 via the notebook parameter in /searchHistory...

CVE-2024-53504

A SQL injection vulnerability has been identified in Siyuan 3.1.11 via the notebook parameter in /searchHistory...

Siyuan 安全漏洞

SiYuan is a privacy-first personal knowledge management system from SiYuan open source. A security vulnerability exists in Siyuan version 3.1.11, which stems from an SQL injection vulnerability contained in the notebook parameter of the /searchHistory file...

CVE-2024-53504

CVE-2024-53504 describes an SQL injection in Siyuan 3.1.11 exploitable via the notebook parameter in /searchHistory. The metric indicates a critical impact (CVSS v3.1: 9.8, High confidentiality, integrity, and availability impacts) with network attack vector and no privileges or user interaction ...