CVE-2021-40978

CVE-2021-40978 Sfruttamento del directory traversal nel dev-server integrato di mkdocs Mkdocs 1.2.2 consente il directory traversal attraverso il dev-server integrato che risponde sulla porta 8000. Di seguito alcuni esempi di percorsi sfruttati con successo: Impatto Usando questa tecnica è...

mkdocs

MkDocs Projektdokumentation mit Markdown MkDocs ist ein schneller , einfacher und wirklich schöner Static-Site-Generator, der auf die Erstellung von Projektdokumentationen ausgelegt ist. Die Quelldateien der Dokumentation werden in Markdown verfasst und mit einer einzigen YAML-Konfigurationsdatei...

MKdocs 1.2.2 - Directory Traversal

The MKdocs 1.2.2 built-in dev-server allows directory traversal using the port 8000, enabling remote exploitation to obtain sensitive information. Note the vendor has disputed the vulnerability see references because the dev server must be used in an unsafe way namely public to have this...

Security-Champions

Guida OWASP Security Champions Utilizzo di MKDocs per ospitare i nostri contenuti accanto alla pagina del progetto OWASP su https://securitychampions.owasp.org/. Ispirato da https://github.com/OWASP/API-Security e https://github.com/OWASP/Top10/tree/master/2021. Creare una copia locale su Windows...

OSIB

OWASP Open Security Information Base OSIB Pagina del progetto: https://owasp.org/www-project-open-security-information-base Repository del software: https://github.com/OWASP/OSIB Strumenti forniti: mkdocsmacroosib.py modulo Python installabile manualmente osibmacro.py macro da copiare che importa...

CyberClass

CyberClass Questo repository contiene risorse educative per Class'Code CyberClass. Albero dei file root@kitploit: 📦CyberClass ------------------------------------ Root directory ┣ 📂docs --------------------------------------- Website sources ┃ ┣ 📂assets ----------------------------------- General...

mas-website

OWASP Mobile Application Security Projekt Webseite Dieses Repository enthält den Quellcode und die Konfiguration für die OWASP Mobile Application Security Projekt Webseite mas.owasp.org. Diese Website aggregiert, organisiert und präsentiert Dokumentation aus den wichtigsten MAS-Ressourcen mit...

CVE-2026-73295

A flaw was found in Material for MkDocs. A DOM-based Cross-Site Scripting XSS vulnerability exists in the search suggestion feature. A remote attacker could exploit this by crafting a malicious URL with a specially designed query parameter. After user interaction, this could lead to the execution...

CVE-2026-73295

Material for MkDocs is a powerful documentation framework built on top of MkDocs. From 7.2.0 until 9.7.7, the mountSearchSuggest function in src/templates/assets/javascripts/components/search/suggest/index.ts contains a DOM-based cross-site scripting vulnerability in the optional search.suggest...

CVE-2026-73295

Material for MkDocs is a powerful documentation framework built on top of MkDocs. From 7.2.0 until 9.7.7, the mountSearchSuggest function in src/templates/assets/javascripts/components/search/suggest/index.ts contains a DOM-based cross-site scripting vulnerability in the optional search.suggest...

UBUNTU-CVE-2026-73295

Material for MkDocs is a powerful documentation framework built on top of MkDocs. From 7.2.0 until 9.7.7, the mountSearchSuggest function in src/templates/assets/javascripts/components/search/suggest/index.ts contains a DOM-based cross-site scripting vulnerability in the optional search.suggest...

CVE-2026-73295 Material for MkDocs: DOM XSS in search suggestions via query parameter

Material for MkDocs is a powerful documentation framework built on top of MkDocs. From 7.2.0 until 9.7.7, the mountSearchSuggest function in src/templates/assets/javascripts/components/search/suggest/index.ts contains a DOM-based cross-site scripting vulnerability in the optional search.suggest...

CVE-2026-73295

Material for MkDocs is a powerful documentation framework built on top of MkDocs. From 7.2.0 until 9.7.7, the mountSearchSuggest function in src/templates/assets/javascripts/components/search/suggest/index.ts contains a DOM-based cross-site scripting vulnerability in the optional search.suggest...

EUVD-2026-57321

Material for MkDocs is a powerful documentation framework built on top of MkDocs. From 7.2.0 until 9.7.7, the mountSearchSuggest function in src/templates/assets/javascripts/components/search/suggest/index.ts contains a DOM-based cross-site scripting vulnerability in the optional search.suggest...

CVE-2026-73295

Material for MkDocs contains a DOM-based XSS in the optional search.suggest feature. From versions 7.2.0 through 9.7.7, the mountSearchSuggest function in src/templates/assets/javascripts/components/search/suggest/index.ts accepts a crafted q URL parameter that can cause JavaScript execution in t...

CVE-2026-73295

Material for MkDocs is a powerful documentation framework built on top of MkDocs. From 7.2.0 until 9.7.7, the mountSearchSuggest function in src/templates/assets/javascripts/components/search/suggest/index.ts contains a DOM-based cross-site scripting vulnerability in the optional search.suggest...

CVE-2026-73295 Material for MkDocs: DOM XSS in search suggestions via query parameter

Material for MkDocs is a powerful documentation framework built on top of MkDocs. From 7.2.0 until 9.7.7, the mountSearchSuggest function in src/templates/assets/javascripts/components/search/suggest/index.ts contains a DOM-based cross-site scripting vulnerability in the optional search.suggest...

Linux Distros Unpatched Vulnerability : CVE-2026-73295

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Material for MkDocs is a powerful documentation framework built on top of MkDocs. From 7.2.0 until 9.7.7, the mountSearchSuggest function in...

py-mkdocs-material -- DOM XSS vulnerability

Martin Donath reports: Material for MkDocs 7.2.0 through 9.7.6 contains a DOM-based cross-site scripting vulnerability in the optional search.suggest feature. A crafted q URL parameter could execute JavaScript in the documentation site's origin after user interaction...

PYSEC-2026-2653 mkdocs-mcp-plugin has a Path Traversal issue

A vulnerability was found in douinc mkdocs-mcp-plugin up to 0.4.1. This affects the function readdocument/listdocuments of the file server.py. Performing a manipulation of the argument docsdir/filepath results in path traversal. The attack is possible to be carried out remotely. The exploit has...