LoopX serve-status permissive CORS policy exposes control-plane state and private Markdown files

Summary loopx serve-status sends Access-Control-Allow-Origin: on every response, including its unauthenticated GET routes. Because the endpoint is unauthenticated and bound to a fixed, well-known loopback port, any website the operator visits can read LoopX control-plane state and the contents of...

petereport

PeTeReport PeTeReport Pe nTe st Report is an open-source application vulnerability reporting tool designed to assist pentesting/redteaming efforts, by simplifying the task of writting and generation of reports. Focused in product security, the tool help security researchers and pentesters to...

writehat

WriteHat is a reporting tool which removes Microsoft Word and many hours of suffering from the reporting process. Markdown -- HTML -- PDF. Created by penetration testers, for penetration testers - but can be used to generate any kind of report. Written in Django Python 3. Features: Effortlessly...

CVE-2026-20841

CVE-2026-20841 - Windows Notepad Remote Code Execution RCE Security Research & Technical Analysis Repository ⚠️ This repository is intended for educational, defensive, and research purposes only. 📖 Overview CVE-2026-20841 is a critical Remote Code Execution RCE vulnerability affecting Microsoft...

CVE-2026-102941

A flaw was found in github.com/gomarkdown/markdown. A remote attacker can cause a Denial of Service DoS by submitting specially crafted Markdown content containing empty or very short link destinations. When link sanitization is enabled, the parser attempts to read beyond the boundaries of the...

CVE-2024-41662

CVE-2024-41662 Markdown XSS leads to RCE in VNote version NOTE: The application properly validates some JavaScript payloads by performing output encoding in the app. However, it fails to validate in certain cases. 5. Further an attacker can achieve Remote Code execution using the following payloa...

agentic-threat-hunting-framework

Agentic Threat Hunting Framework ATHF Quick Start • Installation • Documentation • Examples Give your threat hunting program memory and agency. The Agentic Threat Hunting Framework ATHF is the memory and automation layer for your threat hunting program. It gives your hunts structure, persistence,...

Stirling-PDF SSRF via Markdown

Stirling-PDF is a locally hosted web application that performs various operations on PDF files. Prior to version 1.1.0, when using the /api/v1/convert/markdown/pdf endpoint to convert Markdown to PDF, the backend calls a third-party tool to process it and includes a sanitizer for security...

CVE-2024-44337

CVE-2024-44337 The package "github.com/gomarkdown/markdown" is a Go library for parsing Markdown text and rendering it as HTML. In pseudo-version 'v0.0.0-20240729232818-a2a9c4f' corresponding to commit 'a2a9c4f76ef5a5c32108e36f7c47f8d310322252' and earlier, there is a logic issue in the paragraph...

engagement-mgr

Engagement Manager Engagement Manager is a web application for tracking offensive security engagements. It features a modern UI, built with Next.js, Prisma, and PostgreSQL. The app includes a calendar, engagements, clients, contacts, findings, and operators. Lee Baird @discoverscripts Jay...

Cybersecurity-Handbook

📚 Cybersecurity Handbook An open-source cybersecurity knowledge base for students, professionals, and self-learners — built as structured notes, hands-on labs, and real-world concepts you can search and navigate visually. Built with Quartz • Powered by Markdown • Community Driven • MIT Licensed...

CVE-2023-43263

CVE ID : CVE-2023-43263 Vulnerability Type : Cross-Site Scripting Description : Cross-site scripting XSS vulnerability in Froala Editor v.4.1.1 allows attackers to execute arbitrary code via the Markdown component. Steps to reproduce : Enter payload in markdown component input: Reference : 1...

CVE-2022-34913

Description of CVE-2022-34913 md2roff 1.7 suffers from a stack-based buffer overflow via a Markdown file containing a large number of consecutive characters to be processed. Replication To replicate the vulnerability, we must download a vulnerable version of md2roff version 1.7: git clone...

malice

malice Malice's mission is to be a free open source version of VirusTotal that anyone can use at any scale from an independent researcher to a fortune 500 company. Try It Out DEMO: demo.malice.io username : malice password : ecilam Requirements Hardware 16GB disk space 4GB RAM Software Docker...

CVE-2024-22891

Nteract PoC A Proof-Of-Concept for CVE-2024-22891 vulnerability. nteract 0.28.0 allows Electron webview via Markdown link, with resultant remote code execution. In this repository there is an example vulnerable application and proof-of-concept POC exploit of it. As a PoC there is a python file th...

Linux Distros Unpatched Vulnerability : CVE-2026-102941

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The package github.com/gomarkdown/markdown is a Go library for parsing Markdown text and rendering as HTML. Prior to 0.0.0-20260724235538-61af6e1e6971,...

CVE-2026-102941

The package github.com/gomarkdown/markdown is a Go library for parsing Markdown text and rendering as HTML. Prior to 0.0.0-20260724235538-61af6e1e6971, parser.IsSafeURL in parser/parser.go slices url:nPath before the lenurl = nPath guard. A short destination causes a slice-bounds panic when the...

gomarkdown/markdown IsSafeURL panics on short URLs

Summary IsSafeURL slices url:nPath before checking that lenurl = nPath, so a URL shorter than a path prefix 0, 1 or 2 bytes triggers a slice-bounds panic, and this is reached end to end when the html.Safelink hardening flag is enabled and the input contains an empty or very short link destination...

CVE-2026-102941

The package github.com/gomarkdown/markdown is a Go library for parsing Markdown text and rendering as HTML. Prior to 0.0.0-20260724235538-61af6e1e6971, parser.IsSafeURL in parser/parser.go slices url:nPath before the lenurl = nPath guard. A short destination causes a slice-bounds panic when the...

EUVD-2026-102934

The package github.com/gomarkdown/markdown is a Go library for parsing Markdown text and rendering as HTML. Prior to 0.0.0-20260724235538-61af6e1e6971, parser.IsSafeURL in parser/parser.go slices url:nPath before the lenurl = nPath guard. A short destination causes a slice-bounds panic when the...