CVE-2022-1716

Keep My Notes v1.80.147 allows an attacker with physical access to the victim's device to bypass the application's password/pin lock to access user data. This is possible due to lack of adequate security controls to prevent dynamic code manipulation.

• http://www.kitetech.co/keepmynotesProduct, Vendor Advisory
• https://fluidattacks.com/advisories/tyler/Exploit, Third Party Advisory
• http://www.kitetech.co/keepmynotesProduct, Vendor Advisory
• https://fluidattacks.com/advisories/tyler/Exploit, Third Party Advisory

Published

Jun 2, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-1710The Appointment Hour Booking WordPress plugin before 1.3.56 …4.8
• CVE-2022-1711Server-Side Request Forgery (SSRF) in GitHub repository jgra…7.5
• CVE-2022-1712The LiveSync for WordPress plugin through 1.0 does not have …4.3
• CVE-2022-1713SSRF on /proxy in GitHub repository jgraph/drawio prior to 1…7.5
• CVE-2022-1714Out-of-bounds Read in GitHub repository radareorg/radare2 pr…7.1
• CVE-2022-1715Account Takeover in GitHub repository neorazorx/facturascrip…9.8
• CVE-2022-1717The Custom Share Buttons with Floating Sidebar WordPress plu…4.8
• CVE-2022-1718The trudesk application allows large characters to insert in…7.5
• CVE-2022-1719Reflected XSS on ticket filter function in GitHub repository…5.4
• CVE-2022-1720Buffer Over-read in function grab_file_name in GitHub reposi…7.8
• CVE-2022-1721Path Traversal in WellKnownServlet in GitHub repository jgra…7.5
• CVE-2022-1722SSRF in editor's proxy via IPv6 link-local address in GitHub…3.3