malice

malice Malice's mission is to be a free open source version of VirusTotal that anyone can use at any scale from an independent researcher to a fortune 500 company. Try It Out DEMO: demo.malice.io username : malice password : ecilam Requirements Hardware 16GB disk space 4GB RAM Software Docker...

Stirling-PDF SSRF via Markdown

Stirling-PDF is a locally hosted web application that performs various operations on PDF files. Prior to version 1.1.0, when using the /api/v1/convert/markdown/pdf endpoint to convert Markdown to PDF, the backend calls a third-party tool to process it and includes a sanitizer for security...

agentic-threat-hunting-framework

Agentic Threat Hunting Framework ATHF Quick Start • Installation • Documentation • Examples Give your threat hunting program memory and agency. The Agentic Threat Hunting Framework ATHF is the memory and automation layer for your threat hunting program. It gives your hunts structure, persistence,...

quiver

Quiver : A Meta-Tool for Kali Linux Quiver is an organized namespace of shell functions that pre-fill commands in your terminal so that you can ditch your reliance on notes, copying, pasting, editing, copying and pasting again. Quiver helps you remember how to use every tool in your arsenal and...

petereport

PeTeReport PeTeReport Pe nTe st Report is an open-source application vulnerability reporting tool designed to assist pentesting/redteaming efforts, by simplifying the task of writting and generation of reports. Focused in product security, the tool help security researchers and pentesters to...

OSCP-Exam-Report-Template-Markdown

Offensive Security Exam Report Template in Markdown I created an Offensive Security Exam Report Template in Markdown so LaTeX, Microsoft Office Word, LibreOffice Writer are no longer needed during your Offensive Security OSCP, OSWE, OSEE, OSWP, OSEP, OSED, OSWA, OSDA, OSMR, OSTH, OSIR exam! Now y...

writehat

WriteHat is a reporting tool which removes Microsoft Word and many hours of suffering from the reporting process. Markdown -- HTML -- PDF. Created by penetration testers, for penetration testers - but can be used to generate any kind of report. Written in Django Python 3. Features: Effortlessly...

CVE-2024-44337

CVE-2024-44337 The package "github.com/gomarkdown/markdown" is a Go library for parsing Markdown text and rendering it as HTML. In pseudo-version 'v0.0.0-20240729232818-a2a9c4f' corresponding to commit 'a2a9c4f76ef5a5c32108e36f7c47f8d310322252' and earlier, there is a logic issue in the paragraph...

CVE-2026-20841

CVE-2026-20841 - Windows Notepad Remote Code Execution RCE Security Research & Technical Analysis Repository ⚠️ This repository is intended for educational, defensive, and research purposes only. 📖 Overview CVE-2026-20841 is a critical Remote Code Execution RCE vulnerability affecting Microsoft...

CVE-2026-123311

In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4 command execution via a hidden run control in the Markdown preview was possible...

CVE-2026-123309

In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4 stored XSS was possible on the built-in web server via Markdown preview...

CVE-2026-123311

In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4 command execution via a hidden run control in the Markdown preview was possible...

EUVD-2026-118075

In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4 command execution via a hidden run control in the Markdown preview was possible...

CVE-2026-123311

JetBrains IntelliJ IDEA versions before 2026.3 and 2026.2.4 are vulnerable to command execution due to a hidden run control within the Markdown preview feature. This flaw is classified as an improper restriction of rendered UI layers or frames (CWE-1021). The vulnerability requires local access a...

CVE-2026-123309

In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4 stored XSS was possible on the built-in web server via Markdown preview...

CVE-2026-123309

JetBrains IntelliJ IDEA versions before 2026.3 (specifically 2026.2.4) are vulnerable to stored XSS on the built-in web server. The vulnerability is triggered via the Markdown preview feature. This flaw is classified under CWE-79 (Improper Neutralization of Input During Web Page Generation) and h...

EUVD-2026-118073

In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4 stored XSS was possible on the built-in web server via Markdown preview...

CVE-2026-111059

A flaw was found in Mercury. The application fails to properly sanitize raw HTML when converting user-controlled Markdown into web components. A remote attacker could exploit this vulnerability by providing malicious Markdown containing active HTML elements or scripts, resulting in Cross-Site...

CVE-2026-123311: JetBrains IntelliJ IDEA: In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4 command execution via a hidden run control in the Markdown preview…

In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4 command execution via a hidden run control in the Markdown preview was possible...

CVE-2026-123309: JetBrains IntelliJ IDEA: In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4 stored XSS was possible on the built-in web server via Markdown…

In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4 stored XSS was possible on the built-in web server via Markdown preview...