pwnflow

Pwnflow 🎯 可视化您的安全测试与分析之旅 Pwnflow 是一个专为网络安全专业人员设计的思维导图平台。它能帮助您可视化、跟踪和分享安全测试方法论，同时完全掌控敏感数据。 🚀 核心功能 基础能力 🗺️ 交互式思维导图 ：通过直观的可视化界面创建和导航复杂的安全测试工作流 🤖 AI 辅助 ：利用内置 AI 能力生成节点建议并扩展你的方法论 📋 命令模板 ：保存并复用支持变量替换的命令行命令 📊 进度跟踪 ：可视化测试进度与方法论覆盖范围 安全与隐私 🔐 自托管选项 ：完全运行在你的基础设施上 🔒 加密导出 ：使用 AES-256-GCM 加密安全共享项目与模板 🔏 认证/授权...

rmm

Recon MindMap RMM Tomando inspiración del taller TBHM v4 recon edition by Jason Haddix, desarrollé una herramienta de interfaz de línea de comandos CLI que simplificará la tarea de organizar una lista de dominios y subdominios. El objetivo es crear una herramienta que pueda generar fácilmente...

This Week in Spring - February 3rd, 2026

Hi, Spring fans! This week I'm in northern Europe. I went on the Vaadin cruise from Finland to Sweden, gave a talk on a boat, then arrived in Stockholm in time for the amazing JFokus 2026 event where I had the privilege yesterday of doing a deep dive with my pal James Ward on Spring AI and agenti...

CVE-2021-47844

Xmind 2020 contains a cross-site scripting vulnerability that allows attackers to inject malicious payloads into mind mapping files or custom headers. Attackers can craft malicious files with embedded JavaScript that execute system commands when opened, enabling remote code execution through mous...

CVE-2021-47844

CVE-2021-47844 affects Xmind 2020, describing a persistent cross-site scripting vulnerability in mind mapping files or custom headers that can embed JavaScript to execute commands when opened, enabling remote code execution via user interaction. The documents consistently identify the affected pr...

CVE-2021-47844: Improper Neutralization of Input During Web Page Generation

Xmind 2020 contains a cross-site scripting vulnerability that allows attackers to inject malicious payloads into mind mapping files or custom headers. Attackers can craft malicious files with embedded JavaScript that execute system commands when opened, enabling remote code execution through mous...

Minmap 安全漏洞

Minmap is a multiplayer mini mind mapping application by Isaiah Odhner personal developer. A security vulnerability exists in Minmap. An attacker could exploit this vulnerability to conduct cross-site scripting attacks...

Xmind 2020 Cross Site Scripting / Code Execution

Exploit Title: Xmind 2020 XSS to RCE Exploit Author: TaurusOmar Twitter:@TaurusOmar HomePage:taurusomar.com Date: May 4th, 2021 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Risk: High 8.8 Vendor Homepage: https://www.xmind.net/ Version: 2020 Tested on: Windows, Linux, MacOs Software Description:...

Xmind 2020 - Persistent Cross-Site Scripting

Exploit Title: Xmind 2020 - XSS to RCE Exploit Author: TaurusOmar Date: May 4th, 2021 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Risk: High 8.8 Vendor Homepage: https://www.xmind.net/ Version: 2020 Tested on: Windows, Linux, MacOs Software Description: XMind, a full-featured mind mapping and...

Command Execution Vulnerability in Curtain Client

Curtain Client is a mind mapping software. A command execution vulnerability exists in the Curtain Client, which can be exploited by an attacker to inject an executable DLL file into the client process to perform arbitrary functions...

Command Execution Vulnerability in Quick Thinking Maps for Windows

Xunjie Mind Mapping is a computer mind mapping software, which can draw business flow charts, organization charts, data flow charts, program flow charts, etc. It supports custom drawing operations and so on. A command execution vulnerability exists in Swift Mind Mapping for Windows, which can be...