NotaMy

🇬🇧 Inglese| 🇮🇹 Italiano ---|--- 🧠 NotaMy NotaMy is a hierarchical terminal-based technical note manager designed to reduce the mental cost of context switching for those working on long-term analysis tasks pentesting, reverse engineering, wargames. 🎯 Why NotaMy Was Created When I started working on...

beacon_health_check

Beacon Health Check Aggressor Script Joe Vest Twitter: @joevest Description This aggressor script uses a beacon's note field to indicate the health status of a beacon. This is done by ... Tracking each beacon's current sleep/jitter time Calculating health based on a "max expected check in time"...

ThreatPad

ThreatPad A collaborative, real-time note-taking platform built for Cyber Threat Intelligence CTI and security operations teams. ThreatPad combines the speed of modern productivity tools with CTI-specific capabilities: IOC auto-extraction, STIX 2.1 export, structured threat templates, and...

SiYuan Note <= 3.6.5 - Authentication Bypass

SiYuan Note 3.6.5 and prior is vulnerable to authentication bypass. The CheckAuth middleware unconditionally trusted all chrome-extension:// origins, granting RoleAdministrator access without token validation to any request with a spoofed Origin header. Fixed in v3.7.0. id: CVE-2026-54069 info:...

SiYuan Note - Cross-Site Scripting

SiYuan Note through version 3.6.1 is vulnerable to unauthenticated reflected Cross-Site Scripting XSS in the /api/icon/getDynamicIcon endpoint due to improper filtering of SVG elements with a namespace prefix such as . By using a namespaced script element, attackers can bypass the SanitizeSVG...

SiYuan Note - Cross-Site Scripting

Unauthenticated reflected cross-site scripting XSS vulnerability in all versions of SiYuan Note containing /api/icon/getDynamicIcon with unsafe type=8 rendering logic. Attacker-controlled content is inserted directly into SVG output without proper sanitization. An attacker can execute arbitrary...

hardening-k8s-containers

Intentionally Vulnerable Note Taking Application This repository contains a very simple and vulnerable application used to demonstrate the differences between deploying this application with the default settings to a Kubernetes cluster, versus adding some extra security settings that WILL NOT fix...

app

Standard Notes Standard Notes es una aplicación para tomar notas cifrada de extremo a extremo, pensada para digitalistas y profesionales. Captura tus notas, archivos y el trabajo de tu vida en un solo lugar seguro. ¿Por qué Standard Notes? Sincronización cifrada de extremo a extremo. Solo tú pued...

sharesniffer

sharesniffer sharesniffer is a network analysis tool for finding open and closed file shares on your local network. It includes auto-network discovery and auto-mounting of any open cifs and nfs shares. How to use Example to find all hosts on any local network with open/closed nfs/smb shares: pyth...

CVE-2023-50072

CVE-2023-50072 Existe una vulnerabilidad de cross-site scripting XSS almacenado en OpenKM versión 7.1.40 dbb6e88 con Extensión Profesional que permite a un usuario autenticado cargar una nota en un archivo que actúa como un payload XSS almacenado. Cualquier usuario que abra la nota de un archivo ...

CVE-2024-41662

CVE-2024-41662 Markdown XSS conduce a RCE en VNote versión NOTA: La aplicación valida correctamente algunos payloads JavaScript mediante la codificación de salida en la aplicación. Sin embargo, falla en validar en ciertos casos. 5. Además, un at...

CVE-2014-4322_adaptation

CVE-2014-4322adaptación Solo un intento de adaptar para Note 4, no sé lo que estoy haciendo. Actualmente existe una forma de escribir en el sistema usando ADB CVE-2014-7951 y CVE-2014-7953. zxz0O0 ha confirmado que escribir en el sistema funciona. Lo que necesitábamos era obtener el UID del siste...

cve-2020-35717

CVE-2020–35717 zonote permite XSS a través de una nota manipulada, con la consecuente Ejecución Remota de Código porque la integración de Node.js está habilitada. Pasos para explotar la vulnerabilidad Descarga cualquier versión afectada de zonote Abre la aplicación zonote Importa xss-rce.znt en...

CVE-2026-105302

A flaw was found in the User Session Note mapper of the Keycloak identity and access management solution. The issue occurs because the mapper does not validate whether a requested session note contains sensitive internal credentials, such as federated access tokens from external identity provider...

EUVD-2026-92257

A flaw was found in the User Session Note mapper of the Keycloak identity and access management solution. The issue occurs because the mapper does not validate whether a requested session note contains sensitive internal credentials, such as federated access tokens from external identity provider...

CVE-2026-105302 Keycloak-services: keycloak-services: user session note mapper exposes upstream idp access tokens

A flaw was found in the User Session Note mapper of the Keycloak identity and access management solution. The issue occurs because the mapper does not validate whether a requested session note contains sensitive internal credentials, such as federated access tokens from external identity provider...

CVE-2026-105302

A flaw in the User Session Note mapper of the Keycloak identity and access management solution allows for the exposure of sensitive internal credentials. The mapper fails to validate if a requested session note contains federated access tokens from external identity providers. Consequently, a del...

CVE-2026-105302 Keycloak-services: keycloak-services: user session note mapper exposes upstream idp access tokens

A flaw was found in the User Session Note mapper of the Keycloak identity and access management solution. The issue occurs because the mapper does not validate whether a requested session note contains sensitive internal credentials, such as federated access tokens from external identity provider...

CVE-2026-105302

A flaw was found in the User Session Note mapper of the Keycloak identity and access management solution. The issue occurs because the mapper does not validate whether a requested session note contains sensitive internal credentials, such as federated access tokens from external identity provider...

cve-2013-3319

cve-2013-3319 módulo de metasploit para CVE-2013-3319 / SAP Security Note 1816536 obsoleto : use saphostctrlgetcomputersystem de metasploit. Esto se mantiene solo con fines históricos. Aviso completo: http://labs.integrity.pt/advisories/cve-2013-3319/...