264 matches found
CyberClass
CyberClass This repository contains educational resources for Class'Code CyberClass. Files tree 📦CyberClass ------------------------------------ Root directory ┣ 📂docs --------------------------------------- Website sources ┃ ┣ 📂assets ----------------------------------- General assets logo,...
CVE-2021-40978
CVE-2021-40978 mkdocs built-in dev-server directory traversal exploitation Mkdocs 1.2.2 allows directory traversal through the built-in dev-server which responds on port 8000. There is below some examples of successfully exploited paths: Impact Using this tecnique it is possible to fetch files...
MKdocs 1.2.2 - Directory Traversal
The MKdocs 1.2.2 built-in dev-server allows directory traversal using the port 8000, enabling remote exploitation to obtain sensitive information. Note the vendor has disputed the vulnerability see references because the dev server must be used in an unsafe way namely public to have this...
mas-website
OWASP Mobile Application Security Project Website This repository contains the source and configuration for the OWASP Mobile Application Security Project website mas.owasp.org. This website aggregates, organizes, and presents documentation from the main MAS resources using MkDocs and the...
OSIB
OWASP Open Security Information Base OSIB Project Page: https://owasp.org/www-project-open-security-information-base Software Repository: https://github.com/OWASP/OSIB Provided Tools: mkdocsmacroosib.py manually insallable python module osibmacro.py macro to copy that imports the python module...
mkdocs
MkDocs Project documentation with Markdown MkDocs is a fast , simple and downright gorgeous static site generator that's geared towards building project documentation. Documentation source files are written in Markdown, and configured with a single YAML configuration file. It is designed to be ea...
Security-Champions
OWASP Security Champions Guide Using MKDocs to host our content next to the OWASP project page on https://securitychampions.owasp.org/. Inspired by https://github.com/OWASP/API-Security and https://github.com/OWASP/Top10/tree/master/2021. Building a local copy on Windows Install python python3 -m...
Fedora 44 : GitPython / python-mkdocs-rss-plugin (2026-f2d13d09d7)
The remote Fedora 44 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-f2d13d09d7 advisory. Update to 3.2.0 Fixes GHSA-gq48-pqfc-9p58, GHSA-23mf-xhv8-69c2, GHSA-f9j4-qggq-h239, GHSA-w8jc-g24h-crhw, GHSA-m64x-33q8-m5h7, and GHSA-fx3j-rwgx-fr94. Tenab...
Fedora 43 : GitPython / python-mkdocs-rss-plugin (2026-c4dfd51df1)
The remote Fedora 43 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-c4dfd51df1 advisory. Update to 3.2.0 Fixes GHSA-gq48-pqfc-9p58, GHSA-23mf-xhv8-69c2, GHSA-f9j4-qggq-h239, GHSA-w8jc-g24h-crhw, GHSA-m64x-33q8-m5h7, and GHSA-fx3j-rwgx-fr94. Tenab...
[SECURITY] Fedora 43 Update: python-mkdocs-rss-plugin-1.17.7-5.fc43
This package provides a plugin for MkDocs, the static site generator, which creates RSS 2.0 and JSON Feed 1.1 feeds using the creation and modification dates from git log and page metadata YAML frontmatter...
[SECURITY] Fedora 44 Update: python-mkdocs-rss-plugin-1.17.7-5.fc44
This package provides a plugin for MkDocs, the static site generator, which creates RSS 2.0 and JSON Feed 1.1 feeds using the creation and modification dates from git log and page metadata YAML frontmatter...
Backstage: Improper validation of MkDocs plugin configuration in TechDocs
Impact An authenticated attacker with control over a TechDocs source repository could cause a documentation build to retrieve and publish data from network locations reachable by the build environment. Exposure depends on deployment topology, build mode, and target endpoint protections. Modern...
EUVD-2026-93986
Backstage: Improper validation of MkDocs plugin configuration in TechDocs...
GHSA-Q38J-6VCM-2F5M Backstage: Improper validation of MkDocs plugin configuration in TechDocs
Impact An authenticated attacker with control over a TechDocs source repository could cause a documentation build to retrieve and publish data from network locations reachable by the build environment. Exposure depends on deployment topology, build mode, and target endpoint protections. Modern...
GHSA-QMW3-745M-W99G Backstage: Improper validation of TechDocs MkDocs configuration
Impact An attacker who can provide configuration to a TechDocs build may execute code in the generator runtime. Impact is greatest when documentation generation runs with backend credentials or host access. Patches Patched in @backstage/plugin-techdocs-node version 1.15.4. Workarounds Use externa...
Backstage: Improper validation of TechDocs MkDocs configuration
Impact An attacker who can provide configuration to a TechDocs build may execute code in the generator runtime. Impact is greatest when documentation generation runs with backend credentials or host access. Patches Patched in @backstage/plugin-techdocs-node version 1.15.4. Workarounds Use externa...
Backstage: Bypass of MkDocs configuration sanitizer in TechDocs backend
Impact Users with the ability to commit changes to a repository that uses TechDocs can circumvent the MkDocs configuration file sanitizer introduced in response to CVE-2026-25153 and execute arbitrary code on the TechDocs backend host during documentation generation. Patches Patched...
GHSA-P75X-JH7P-PPCX Backstage: Bypass of MkDocs configuration sanitizer in TechDocs backend
Impact Users with the ability to commit changes to a repository that uses TechDocs can circumvent the MkDocs configuration file sanitizer introduced in response to CVE-2026-25153 and execute arbitrary code on the TechDocs backend host during documentation generation. Patches Patched...