20 matches found
quiver
Quiver : A Meta-Tool for Kali Linux Quiver is an organized namespace of shell functions that pre-fill commands in your terminal so that you can ditch your reliance on notes, copying, pasting, editing, copying and pasting again. Quiver helps you remember how to use every tool in your arsenal and...
TJ-OPT
TJ-OPT 릴리스 날짜 2024년 9월 9일 소개 펜테스터로서 유용한 정보를 많이 담고 있는 훌륭한 리소스, 치트 시트, 가이드라인이 많이 있습니다. 하지만 여기저기 흩어져 있는 이러한 메모나 리소스를 찾는 일은 답답하고 시간이 많이 걸릴 수 있습니다. 여러 가지 메모 도구를 사용하여 시스템 전체에 로컬로 저장해 둔 방대한 양의 메모는 말할 것도 없습니다. 게다가 일부 펜테스터는 폐쇄된 환경에서 진행되는 진단 업무를 맡아 장치에 있는 메모와 파일을 전송하기가 더 어려울 수도 있습니다. 과거에는 Joplin으로 메모를 관리했지...
EUVD-2024-42543
Malicious code in bioql PyPI...
EUVD-2021-30628
Malicious code in bioql PyPI...
EUVD-2021-8640
Malicious code in bioql PyPI...
CVE-2017-1000459
Leanote version = 2.5 is vulnerable to XSS due to not sanitized input in markdown notes...
CVE-2025-32391
HedgeDoc is an open source, real-time, collaborative, markdown notes application. Prior to 1.10.3, a malicious SVG file uploaded to HedgeDoc results in the possibility of XSS when opened in a new tab instead of the editor itself. The XSS is possible by exploiting the JSONP capabilities of GitHub...
CVE-2025-32391
HedgeDoc has a vulnerability (CVE-2025-32391) up to version 1.10.2 where uploading a malicious SVG can trigger cross-site scripting when the file is opened in a new tab, via the GitHub Gist JSONP embedding feature. The issue affects instances using the local filesystem upload backend or configura...
CVE-2024-47610
The CVE-2024-47610 issue affects InvenTree before 0.16.5, where a registered user can store JavaScript in Markdown notes fields that are rendered for other logged-in users, enabling stored cross-site scripting (XSS). Root cause: lack of input sanitization in the Markdown rendering path and storag...
InvenTree 跨站脚本漏洞
InvenTree is an open source inventory management system from InvenTree Open Source. Provides powerful low-level inventory control and parts tracking. A cross-site scripting vulnerability exists in InvenTree versions prior to 0.16.5, which originated by allowing a registered user to store JavaScri...
PT-2024-32671
Name of the Vulnerable Software and Affected Versions InvenTree versions prior to 0.16.5 Description The issue allows a registered user to store JavaScript in markdown notes fields, which are then displayed to other logged-in users who visit the same page and executed. The estimated number of...
CVE-2024-47610: Improper Neutralization of Input During Web Page Generation
InvenTree is an Open Source Inventory Management System. In affected versions of InvenTree it is possible for a registered user to store javascript in markdown notes fields, which are then displayed to other logged in users who visit the same page and executed. The vulnerability has been addresse...
CVE-2024-38353
CVE-2024-38353 (CodiMD) affects CodiMD prior to 2.5.4, where an unauthenticated attacker can access uploaded image data due to missing authentication and access controls. The underlying issue is insecure filename generation in the Formidable library, enabling an attacker who can guess an image UR...
CVE-2021-43721
Leanote 2.7.0 is vulnerable to Cross Site Scripting XSS in the markdown type note. This leads to remote code execution with payload :...
CVE-2017-1000459
Leanote version = 2.5 is vulnerable to XSS due to not sanitized input in markdown notes...
CVE-2017-1000459
Leanote version = 2.5 is vulnerable to XSS due to not sanitized input in markdown notes...
Design/Logic Flaw
Leanote version = 2.5 is vulnerable to XSS due to not sanitized input in markdown notes...
CVE-2017-1000459
Leanote
