CVE-2026-39987

CVE-2026-39987 — Marimo Python Notebook Pre-Authenticated Remote Code Execution TL;DR A pre-authenticated remote code execution vulnerability in Marimo , an open-source Python notebook for data science and AI/ML. The terminal WebSocket endpoint /terminal/ws completely skips authentication...

ThreatHunting-JupyterNotebooks

🟣 Weekly Purple Team - Threat Hunting Notebooks A collection of threat hunting and detection engineering Jupyter notebooks accompanying the Weekly Purple Team YouTube channel. Each notebook provides detection logic to help security professionals understand both offensive techniques and defensive...

petereport

PeTeReport PeTeReport Pe nTe st Report is an open-source application vulnerability reporting tool designed to assist pentesting/redteaming efforts, by simplifying the task of writting and generation of reports. Focused in product security, the tool help security researchers and pentesters to...

selinux-notebook

The SELinux Notebook Introduction The SELinux Notebook is an Open Source book on SELinux, originally created by Richard Haines and donated to the SELinux community. The Notebook's goal is to be the most current and comprehensive book on SELinux, covering the Linux Kernel components, the userspace...

memOptix

memOptix This Jupyter notebook was created to assist DFIR professionals with triaging Windows memory dumps. Please note that this notebook was created based on the output generated from CrowdStrike's Supermem python script https://github.com/CrowdStrike/SuperMem. SuperMem triage mode 2 or 3 shoul...

TJ-OSINT-Notebook

TJ-OSINT-Notebook Intial Release November 18th 2022 Main Purpose: This OSINT Notebook provides an overview of the tools, techniques, and resources that I use for a variety of situations for performing reconaissance and OSINT operations. This Notebook has helped me in many situations to learn more...

lk_scraper

LinkedIn Scraper Scrapes Any LinkedIn Data Installation $ pip install git+git://github.com/jqueguiner/lkscraper Setup Using Docker compose $ docker-compose up -d $ docker-compose run lkscraper python3 Using Docker only for Selenium server First, you need to run a Selenium server $ docker run -d -...

rizin-notebook

Rizin Notebook A notebook for binary analysis with rizin. Keep notes, commands, and scripts organized per binary. Requires rizin 0.7.0 or later. What it does Each notebook page is tied to one binary. It stores the binary itself, its SHA-256 hash, and a list of cells : command cells - a rizin...

rizin-notebook

Rizin Notebook A notebook for binary analysis with rizin. Keep notes, commands, and scripts organized per binary. Requires rizin 0.7.0 or later. What it does Each notebook page is tied to one binary. It stores the binary itself, its SHA-256 hash, and a list of cells : command cells - a rizin...

CitrixNetscalerAnalysis

Citrix Analysis Notebook A jupyter notebook to aid in automating some of the forensic analysis related to Citrix Netscaler hosts compromised via CVE-2019-19781. For help retrieving artifacts to examine see this Citrix triage script. All notes/suggestions are welcome. Feel free to submit pull...

CVE-2024-23997

YANA Notebook PoC A Proof-Of-Concept for CVE-2024-23997 vulnerability. 1. Vunerability Overview: Vulnerability Subject: Local Code Excution via XSS Vulnerability Version: = 1.0.16 Attack Type: Remote Code Execution Attack Vectors: To exploit the vulnerability, we must intercept an HTTP packet...

CVE-2025-63848

CVE-2025-63848 swish-prolog cve Stored cross site scripting xss vulnerability in SWISH prolog thru 2.2.0 allowing attackers to execute arbitrary code via crafted web IDE notebook. Impact One click Account takeover. Mitigation Upgrade to the latest version to mitigate the ATO...

CVE-2026-39987

CVE-2026-39987 — Marimo Pre-Auth RCE via Terminal WebSocket / / | / / / | \ / \ \ / / | // / \ / / | | / / // // / / // // \ / Status: Patched in 0.23.0 — marimo-team/marimo@c24d480 Vulnerability The /terminal/ws endpoint lacks the validateauth call present in every other authenticated endpoint...

CVE-2025-40536-Analysis

CVE-2025-40536-Analysis victoriaalicex.github.io linearregressiontaxi.ipynb linearregressiontaxi.ipynb...

CVE-2026-39987-marimo-rce

CVE-2026-39987 - Marimo Pre-Auth RCE Unauthenticated Remote Code Execution in Marimo via WebSocket Terminal 📌 Overview CVE-2026-39987 is a critical Pre-Authentication Remote Code Execution vulnerability affecting Marimo versions prior to 0.23.0. The /terminal/ws WebSocket endpoint completely...

CLEANSTART-2026-LA02184 Jupyter notebook is a web-based notebook environment for interactive computing

Security vulnerability affects the jupyter-notebook package. The Jupyter notebook is a web-based notebook environment for interactive computing...

CLEANSTART-2026-IA17108 Jupyter Notebook is a web-based notebook environment for interactive computing

Security vulnerability affects the jupyter-notebook package. Jupyter Notebook is a web-based notebook environment for interactive computing...

CVE-2026-112395 vulnerabilities

Vulnerabilities for packages: openstack-horizon-2026.1, superset-fips, netbox, apache-beam-python-3.13-sdk, apache-beam-python-3.14-sdk, openstack-horizon-2025.2-fips, pgadmin4, nemo-gym, gftools, kserve, label-studio, pgadmin4-fips, py3-pillow, open-webui, kserve-xgbserver,...

CVE-2026-112400 vulnerabilities

Vulnerabilities for packages: openstack-horizon-2026.1, superset-fips, netbox, apache-beam-python-3.13-sdk, apache-beam-python-3.14-sdk, openstack-horizon-2025.2-fips, pgadmin4, nemo-gym, gftools, kserve, label-studio, pgadmin4-fips, py3-pillow, open-webui, kserve-xgbserver,...

CVE-2026-112404 vulnerabilities

Vulnerabilities for packages: openstack-horizon-2026.1, superset-fips, netbox, apache-beam-python-3.13-sdk, apache-beam-python-3.14-sdk, openstack-horizon-2025.2-fips, pgadmin4, nemo-gym, gftools, kserve, label-studio, pgadmin4-fips, py3-pillow, open-webui, kserve-xgbserver,...