CVE-2024-23743

CVE-2024-23743 CVE-2024-23743 An issue in Notion for MacOS v.3.1.0 allows a remote, attacker to execute arbitrary code via the RunAsNode and enableNodeClilnspectArguments components There is a tool designed to automate the process of searching for vulnerabilities in electron:...

notionterm

notionterm Embed reverse shell inNotion pages. Hack while taking notes FOR ➕: Hiding attacker IP in reverse shell No direct interaction between attacker and target machine. Notion is used as a proxy hosting the reverse shell Demo/Quick proof insertion within report High available and shareable...

CVE-2024-23745

CVE-2024-23745 In Notion Web Clipper 1.0.37, a .nib file is susceptible to the Dirty NIB attack. NIB files can be manipulated to execute arbitrary commands. Additionally, even if a NIB file is modified within an application, Gatekeeper may still permit the execution of the application, enabling t...

cve-2025-5025

cve-2025-5025 Report in https://www.notion.so/PoC-CVE-2025-5025-233f40a863f88009b35ae8ba86f7a50f?source=copylink with vietnamese Comment to give your opinion...

notionterm

notionterm Incrusta una reverse shell en páginas deNotion. Hackea mientras tomas notas PARA ➕: Ocultar la IP del atacante en una reverse shell Sin interacción directa entre el atacante y la máquina objetivo. Se usa Notion como proxy que aloja la reverse shell Insertar una demo/prueba rápida en un...

OffensiveNotion

OffensiveNotion Notion yes, the notetaking app as a C2. A collaboration by: Documentation | Pull Requests | Issues !Pull...

hermes

Hermes Hermes is a lightweight Linux agent written in Python, designed for Mythic 3.0 and newer. Named after Hermes, messenger of the gods — built for speed and discretion. Features Linux support SOCKS5 proxy support for pivoting and lateral movement Multiple C2 profiles: HTTP, Notion Encrypted K...

filecrawl (>=1.0.0b0, <=1.0.0), framler (>=0.1.0, <=0.1.1) +2 more potentially affected by CVE-2026-85999 via soupsieve (1.8.0)

soupsieve PYPI version 1.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on soupsieve and may be impacted: - filecrawl =1.0.0b0, =0.1.0, =0.1.0, =0.0.0, =0.1.0 Source cves: CVE-2026-85999 Source advisory: OSV:PYSEC-2026-4171...

filecrawl (>=1.0.0b0, <=1.0.0), framler (>=0.1.0, <=0.1.1) +2 more potentially affected by CVE-2026-86000 via soupsieve (1.8.0)

soupsieve PYPI version 1.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on soupsieve and may be impacted: - filecrawl =1.0.0b0, =0.1.0, =0.1.0, =0.0.0, =0.1.0 Source cves: CVE-2026-86000 Source advisory: OSV:GHSA-GJV8-XP57-G29C...

filecrawl (>=1.0.0b0, <=1.0.0), framler (>=0.1.0, <=0.1.1) +2 more potentially affected by CVE-2026-85999 via soupsieve (1.8.0)

soupsieve PYPI version 1.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on soupsieve and may be impacted: - filecrawl =1.0.0b0, =0.1.0, =0.1.0, =0.0.0, =0.1.0 Source cves: CVE-2026-85999 Source advisory: OSV:GHSA-J934-XHV5-FG8F...

Malicious Package

Overview mcp-server-notion is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

filecrawl (>=1.0.0b0, <=1.0.0), framler (>=0.1.0, <=0.1.1) +2 more potentially affected by CVE-2026-49477 via soupsieve (1.8.0)

soupsieve PYPI version 1.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on soupsieve and may be impacted: - filecrawl =1.0.0b0, =0.1.0, =0.1.0, =0.0.0, =0.1.0 Source cves: CVE-2026-49477 Source advisory: OSV:GHSA-836R-79RF-4M37...

PYSEC-2026-1491 Khoj has an IDOR in Notion OAuth Flow that Enables Index Poisoning

Summary An IDOR in the Notion OAuth callback allows an attacker to hijack any user's Notion integration by manipulating the state parameter. The callback endpoint accepts any user UUID without verifying the OAuth flow was initiated by that user, allowing attackers to replace victims' Notion...

Khoj has an IDOR in Notion OAuth Flow that Enables Index Poisoning

SummaryAn IDOR in the Notion OAuth callback allows an attacker to hijack any user's Notion integration by manipulating the state parameter. The callback endpoint accepts any user UUID without verifying the OAuth flow was initiated by that user, allowing attackers to replace victims' Notion...

VulnPilot

VulnPilot VulnPilot is an automation framework for vulnerabil...

Malicious code in mcp-server-notion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0423928197ec83ac273fa4a1b66d9e75398b956e7d5027014ff6326c552a46c2 Package occupies the unscoped name mcp-server-notion to catch misrouted installs of the scoped MCP Notion server. package.json declares "postinstall"...

Server-side Request Forgery (SSRF)

Overview auth-fetch-mcp is a MCP server that lets AI read Notion, Google Docs, Jira & any login-protected page via a real browser Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via unvalidated authfetch and downloadmedia URLs. The downloadmedia and authfetch...

Security Insights Where Work Happens: Notion Custom Agents + Wiz MCP

Bring Wiz cloud security insights into your Notion workspace with Custom Agents — enabling automated reporting, investigation, and security workflows where teams already work...

CVE-2026-25020

Missing Authorization vulnerability in WP connect WP Sync for Notion wp-sync-for-notion allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Sync for Notion: from n/a through = 1.7.0...

CVE-2025-69207

Khoj is a self-hostable artificial intelligence app. Prior to 2.0.0-beta.23, an IDOR in the Notion OAuth callback allows an attacker to hijack any user's Notion integration by manipulating the state parameter. The callback endpoint accepts any user UUID without verifying the OAuth flow was...