CVE-2021-40978

CVE-2021-40978 Sfruttamento del directory traversal nel dev-server integrato di mkdocs Mkdocs 1.2.2 consente il directory traversal attraverso il dev-server integrato che risponde sulla porta 8000. Di seguito alcuni esempi di percorsi sfruttati con successo: Impatto Usando questa tecnica è...

MKdocs 1.2.2 - Directory Traversal

The MKdocs 1.2.2 built-in dev-server allows directory traversal using the port 8000, enabling remote exploitation to obtain sensitive information. Note the vendor has disputed the vulnerability see references because the dev server must be used in an unsafe way namely public to have this...

Security-Champions

Guia do OWASP Security Champions Usando MKDocs para hospedar nosso conteúdo ao lado da página do projeto OWASP em https://securitychampions.owasp.org/. Inspirado em https://github.com/OWASP/API-Security e https://github.com/OWASP/Top10/tree/master/2021. Criando uma cópia local no Windows Instale ...

OSIB

OWASP Open Security Information Base OSIB Página do Projeto: https://owasp.org/www-project-open-security-information-base Repositório de Software: https://github.com/OWASP/OSIB Ferramentas Fornecidas: mkdocsmacroosib.py módulo Python instalável manualmente osibmacro.py macro para copiar que impor...

mkdocs

MkDocs Markdown के साथ प्रोजेक्ट दस्तावेज़ीकरण MkDocs एक तेज़ , सरल और बेहद खूबसूरत स्टैटिक साइट जनरेटर है जो प्रोजेक्ट दस्तावेज़ीकरण बनाने के लिए डिज़ाइन किया गया है। दस्तावेज़ीकरण स्रोत फ़ाइलें Markdown में लिखी जाती हैं, और एक एकल YAML कॉन्फ़िगरेशन फ़ाइल से कॉन्फ़िगर की जाती हैं। इसे उपयोग में...

mas-website

Site do Projeto OWASP de Segurança de Aplicações Móveis Este repositório contém o código-fonte e a configuração do site do Projeto OWASP de Segurança de Aplicações Móveis mas.owasp.org. Este site agrega, organiza e apresenta documentação dos principais recursos do MAS usando MkDocs e o tema...

CyberClass

CyberClass Questo repository contiene risorse educative per Class'Code CyberClass. Albero dei file root@kitploit: 📦CyberClass ------------------------------------ Root directory ┣ 📂docs --------------------------------------- Website sources ┃ ┣ 📂assets ----------------------------------- General...

CVE-2026-73295

A flaw was found in Material for MkDocs. A DOM-based Cross-Site Scripting XSS vulnerability exists in the search suggestion feature. A remote attacker could exploit this by crafting a malicious URL with a specially designed query parameter. After user interaction, this could lead to the execution...

CVE-2026-73295

Material for MkDocs is a powerful documentation framework built on top of MkDocs. From 7.2.0 until 9.7.7, the mountSearchSuggest function in src/templates/assets/javascripts/components/search/suggest/index.ts contains a DOM-based cross-site scripting vulnerability in the optional search.suggest...

CVE-2026-73295

Material for MkDocs is a powerful documentation framework built on top of MkDocs. From 7.2.0 until 9.7.7, the mountSearchSuggest function in src/templates/assets/javascripts/components/search/suggest/index.ts contains a DOM-based cross-site scripting vulnerability in the optional search.suggest...

UBUNTU-CVE-2026-73295

Material for MkDocs is a powerful documentation framework built on top of MkDocs. From 7.2.0 until 9.7.7, the mountSearchSuggest function in src/templates/assets/javascripts/components/search/suggest/index.ts contains a DOM-based cross-site scripting vulnerability in the optional search.suggest...

CVE-2026-73295

Material for MkDocs is a powerful documentation framework built on top of MkDocs. From 7.2.0 until 9.7.7, the mountSearchSuggest function in src/templates/assets/javascripts/components/search/suggest/index.ts contains a DOM-based cross-site scripting vulnerability in the optional search.suggest...

CVE-2026-73295 Material for MkDocs: DOM XSS in search suggestions via query parameter

Material for MkDocs is a powerful documentation framework built on top of MkDocs. From 7.2.0 until 9.7.7, the mountSearchSuggest function in src/templates/assets/javascripts/components/search/suggest/index.ts contains a DOM-based cross-site scripting vulnerability in the optional search.suggest...

EUVD-2026-57321

Material for MkDocs is a powerful documentation framework built on top of MkDocs. From 7.2.0 until 9.7.7, the mountSearchSuggest function in src/templates/assets/javascripts/components/search/suggest/index.ts contains a DOM-based cross-site scripting vulnerability in the optional search.suggest...

CVE-2026-73295

Material for MkDocs contains a DOM-based XSS in the optional search.suggest feature. From versions 7.2.0 through 9.7.7, the mountSearchSuggest function in src/templates/assets/javascripts/components/search/suggest/index.ts accepts a crafted q URL parameter that can cause JavaScript execution in t...

CVE-2026-73295

Material for MkDocs is a powerful documentation framework built on top of MkDocs. From 7.2.0 until 9.7.7, the mountSearchSuggest function in src/templates/assets/javascripts/components/search/suggest/index.ts contains a DOM-based cross-site scripting vulnerability in the optional search.suggest...

CVE-2026-73295 Material for MkDocs: DOM XSS in search suggestions via query parameter

Material for MkDocs is a powerful documentation framework built on top of MkDocs. From 7.2.0 until 9.7.7, the mountSearchSuggest function in src/templates/assets/javascripts/components/search/suggest/index.ts contains a DOM-based cross-site scripting vulnerability in the optional search.suggest...

Linux Distros Unpatched Vulnerability : CVE-2026-73295

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Material for MkDocs is a powerful documentation framework built on top of MkDocs. From 7.2.0 until 9.7.7, the mountSearchSuggest function in...

py-mkdocs-material -- DOM XSS vulnerability

Martin Donath reports: Material for MkDocs 7.2.0 through 9.7.6 contains a DOM-based cross-site scripting vulnerability in the optional search.suggest feature. A crafted q URL parameter could execute JavaScript in the documentation site's origin after user interaction...

PYSEC-2026-2653 mkdocs-mcp-plugin has a Path Traversal issue

A vulnerability was found in douinc mkdocs-mcp-plugin up to 0.4.1. This affects the function readdocument/listdocuments of the file server.py. Performing a manipulation of the argument docsdir/filepath results in path traversal. The attack is possible to be carried out remotely. The exploit has...