petereport

PeTeReport PeTeReport Pe nTe st Report is an open-source application vulnerability reporting tool designed to assist pentesting/redteaming efforts, by simplifying the task of writting and generation of reports. Focused in product security, the tool help security researchers and pentesters to...

CVE-2026-20841

CVE-2026-20841 This content corresponds to a part of what is provided through the Monthly Report for PatchPoint subscribers. Overview Microsoft disclosed a patch for an RCE vulnerability in Notepad in February 2026. The vulnerability is a Command Injection vulnerability that occurs in Notepad,...

engagement-mgr

Engagement Manager Engagement Manager is a web application for tracking offensive security engagements. It features a modern UI, built with Next.js, Prisma, and PostgreSQL. The app includes a calendar, engagements, clients, contacts, findings, and operators. Lee Baird @discoverscripts Jay...

Cybersecurity-Handbook

📚 Cybersecurity Handbook An open-source cybersecurity knowledge base for students, professionals, and self-learners — built as structured notes, hands-on labs, and real-world concepts you can search and navigate visually. Built with Quartz • Powered by Markdown • Community Driven • MIT Licensed...

TJ-OPT

TJ-OPT Release Date September 9th 2024 Introduction As a pentester, there are many great resources, cheat sheets, and guidelines that contain a large amount of valuable information. However, it can be frustrating and time-consuming to find these notes or resources that are scattered all over the...

OSCP-Exam-Report-Template-Markdown

Offensive Security Exam Report Template in Markdown I created an Offensive Security Exam Report Template in Markdown so LaTeX, Microsoft Office Word, LibreOffice Writer are no longer needed during your Offensive Security OSCP, OSWE, OSEE, OSWP, OSEP, OSED, OSWA, OSDA, OSMR, OSTH, OSIR exam! Now y...

CVE-2024-25503

CVE-2024-25503 Vulnerability type : Cross Site Scripting XSS Product: Advanced REST Client desktop application Vulnerable Version: 17.0.9 Vendor of the products:https://www.advancedrestclient.com/ 1. Description Cross-Site Scripting XSS vulnerability in Advanced REST Client v.17.0.9 allows a...

Cyber-Library

Cyber Library Learn cybersecurity, from the foundations up. A structured, community-maintained knowledge base: six tracks, one tree, from how a network works to how an attacker thinks. Read the library → · Browse the structure · Connect your assistant ⭐ If the library helps you, star the repo...

writehat

WriteHat is a reporting tool which removes Microsoft Word and many hours of suffering from the reporting process. Markdown -- HTML -- PDF. Created by penetration testers, for penetration testers - but can be used to generate any kind of report. Written in Django Python 3. Features: Effortlessly...

quiver

Quiver : A Meta-Tool for Kali Linux Quiver is an organized namespace of shell functions that pre-fill commands in your terminal so that you can ditch your reliance on notes, copying, pasting, editing, copying and pasting again. Quiver helps you remember how to use every tool in your arsenal and...

CVE-2026-20841

🛡️ CVE-2026-20841 - Windows Notepad Security Test Tool ⚠️ What is CVE-2026-20841? CVE-2026-20841 is a known security weakness in the Windows Notepad application. It affects the markdown feature, which lets Notepad display formatted text with clickable links. This weakness happens because the...

agentic-threat-hunting-framework

Agentic Threat Hunting Framework ATHF Quick Start • Installation • Documentation • Examples Give your threat hunting program memory and agency. The Agentic Threat Hunting Framework ATHF is the memory and automation layer for your threat hunting program. It gives your hunts structure, persistence,...

awesome-cybersecurity-resources

awesome-cybersecurity-resources Awesome Cybersecurity Resources, more. Purpose This repository stores curated cybersecurity resources gathered from the internet, repository documentation, and selected local notes. README.md is the resource catalog and source of truth. Each entry contains a headin...

CVE-2022-45025

CVE-2022-45025 Command injection via PDF import in Markdown Preview Enhanced VSCode, Atom Description The Mume markdown tool library was vulnerable to command injection due to use of spawn command with shell: true option. This could allow an attacker to achieve arbitary code execution by tricking...

mkdocs

MkDocs Project documentation with Markdown MkDocs is a fast , simple and downright gorgeous static site generator that's geared towards building project documentation. Documentation source files are written in Markdown, and configured with a single YAML configuration file. It is designed to be ea...

CVE-2024-22891

Nteract PoC A Proof-Of-Concept for CVE-2024-22891 vulnerability. nteract 0.28.0 allows Electron webview via Markdown link, with resultant remote code execution. In this repository there is an example vulnerable application and proof-of-concept POC exploit of it. As a PoC there is a python file th...

CVE-2023-43263

CVE ID : CVE-2023-43263 Vulnerability Type : Cross-Site Scripting Description : Cross-site scripting XSS vulnerability in Froala Editor v.4.1.1 allows attackers to execute arbitrary code via the Markdown component. Steps to reproduce : Enter payload in markdown component input: Reference : 1...

CVE-2022-34913

Description of CVE-2022-34913 md2roff 1.7 suffers from a stack-based buffer overflow via a Markdown file containing a large number of consecutive characters to be processed. Replication To replicate the vulnerability, we must download a vulnerable version of md2roff version 1.7: git clone...

Stirling-PDF SSRF via Markdown

Stirling-PDF is a locally hosted web application that performs various operations on PDF files. Prior to version 1.1.0, when using the /api/v1/convert/markdown/pdf endpoint to convert Markdown to PDF, the backend calls a third-party tool to process it and includes a sanitizer for security...

CVE-2026-115352

A flaw was found in mistune. This algorithmic complexity vulnerability allows an unauthenticated remote attacker to cause a Denial of Service DoS by submitting specially crafted Markdown input containing long sequences of unmatched bracket characters. When parsing this malformed input, the inline...