notionterm

notionterm Embed reverse shell inNotion pages. Hack while taking notes FOR ➕: Hiding attacker IP in reverse shell No direct interaction between attacker and target machine. Notion is used as a proxy hosting the reverse shell Demo/Quick proof insertion within report High available and shareable...

notionterm

notionterm Встраивание обратной оболочки в страницыNotion. Хакайте, делая заметки ДЛЯ ➕: Скрытие IP-адреса атакующего в обратной оболочке Нет прямого взаимодействия между атакующим и целевой машиной. Notion используется как прокси для хостинга обратной оболочки Демонстрация/быстрое подтверждение ...

CVE-2024-23743

CVE-2024-23743 CVE-2024-23743 Проблема в Notion for MacOS v.3.1.0 позволяет удаленному злоумышленнику выполнять произвольный код через компоненты RunAsNode и enableNodeClilnspectArguments Существует инструмент, предназначенный для автоматизации поиска уязвимостей в electron:...

CVE-2024-23745

CVE-2024-23745 В Notion Web Clipper 1.0.37 файл .nib подвержен атаке Dirty NIB. Файлы NIB могут быть изменены для выполнения произвольных команд. Кроме того, даже если файл NIB изменён внутри приложения, Gatekeeper может по-прежнему разрешать выполнение приложения, позволяя выполнять произвольные...

cve-2025-5025

cve-2025-5025 Bericht unter https://www.notion.so/PoC-CVE-2025-5025-233f40a863f88009b35ae8ba86f7a50f?source=copylink auf Vietnamesisch Kommentieren Sie, um Ihre Meinung zu äußern...

OffensiveNotion

OffensiveNotion Notion sì, l'app per prendere appunti come C2. Una collaborazione di: Documentazione | Pull Requests | Issues !Pull...

hermes

Hermes Hermes ist ein leichtgewichtiger Linux-Agent, geschrieben in Python, entwickelt für Mythic 3.0 und neuer. Benannt nach Hermes, dem Götterboten – entwickelt für Geschwindigkeit und Diskretion. Funktionen Linux-Unterstützung SOCKS5-Proxy-Unterstützung für Pivoting und laterale Bewegung Mehre...

PYSEC-2026-1491 Khoj has an IDOR in Notion OAuth Flow that Enables Index Poisoning

Summary An IDOR in the Notion OAuth callback allows an attacker to hijack any user's Notion integration by manipulating the state parameter. The callback endpoint accepts any user UUID without verifying the OAuth flow was initiated by that user, allowing attackers to replace victims' Notion...

VulnPilot

VulnPilot VulnPilot is an automation framework for vulnerabil...

Malicious code in mcp-server-notion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0423928197ec83ac273fa4a1b66d9e75398b956e7d5027014ff6326c552a46c2 Package occupies the unscoped name mcp-server-notion to catch misrouted installs of the scoped MCP Notion server. package.json declares "postinstall"...

Security Insights Where Work Happens: Notion Custom Agents + Wiz MCP

Bring Wiz cloud security insights into your Notion workspace with Custom Agents — enabling automated reporting, investigation, and security workflows where teams already work...

CVE-2026-25020

Missing Authorization vulnerability in WP connect WP Sync for Notion wp-sync-for-notion allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Sync for Notion: from n/a through = 1.7.0...

CVE-2025-69207

Khoj is a self-hostable artificial intelligence app. Prior to 2.0.0-beta.23, an IDOR in the Notion OAuth callback allows an attacker to hijack any user's Notion integration by manipulating the state parameter. The callback endpoint accepts any user UUID without verifying the OAuth flow was...

CVE-2026-25020

Missing Authorization vulnerability in WP connect WP Sync for Notion wp-sync-for-notion allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Sync for Notion: from n/a through = 1.7.0...

CVE-2026-25020 WordPress WP Sync for Notion plugin <= 1.7.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in WP connect WP Sync for Notion wp-sync-for-notion allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Sync for Notion: from n/a through = 1.7.0...

EUVD-2026-5305

Missing Authorization vulnerability in WP connect WP Sync for Notion wp-sync-for-notion allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Sync for Notion: from n/a through = 1.7.0...

CVE-2026-25020 WordPress WP Sync for Notion plugin <= 1.7.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in WP connect WP Sync for Notion wp-sync-for-notion allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Sync for Notion: from n/a through = 1.7.0...

CVE-2026-25020

CVE-2026-25020 affects the WordPress WP Sync for Notion plugin up to version 1.7.0. The Red Hat, CVE, NVD, and PT Security entries all describe a Missing Authorization / Broken Access Control vulnerability caused by incorrectly configured access control security levels in WP Sync for Notion, allo...

CVE-2026-25020

Missing Authorization vulnerability in WP connect WP Sync for Notion wp-sync-for-notion allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Sync for Notion: from n/a through = 1.7.0...

WordPress plugin WP Sync for Notion 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed t...