sharesniffer

sharesniffer sharesniffer is a network analysis tool for finding open and closed file shares on your local network. It includes auto-network discovery and auto-mounting of any open cifs and nfs shares. How to use Example to find all hosts on any local network with open/closed nfs/smb shares:...

cve-2020-35717

CVE-2020–35717 zonote 允许通过精心构造的笔记触发 XSS，并导致远程代码执行（因为启用了 Node.js 集成）。 漏洞利用步骤 下载任何受影响的 zonote 版本 打开 zonote 应用 通过 菜单 打开，将 xss-rce.znt 导入 zonote 将鼠标悬停在导入笔记中的不同链接上 披露时间线 2020-12-26 发现漏洞并与项目所有者联系 2020-12-26 项目所有者表示无意维护仓库或修复漏洞 2021-01-01 公开披露漏洞...

SiYuan Note <= 3.6.5 - Authentication Bypass

SiYuan Note 3.6.5 and prior is vulnerable to authentication bypass. The CheckAuth middleware unconditionally trusted all chrome-extension:// origins, granting RoleAdministrator access without token validation to any request with a spoofed Origin header. Fixed in v3.7.0. id: CVE-2026-54069 info:...

SiYuan Note - Cross-Site Scripting

SiYuan Note through version 3.6.1 is vulnerable to unauthenticated reflected Cross-Site Scripting XSS in the /api/icon/getDynamicIcon endpoint due to improper filtering of SVG elements with a namespace prefix such as . By using a namespaced script element, attackers can bypass the SanitizeSVG...

vLLM 0.8.3 - 0.14.0 - Information Disclosure

vLLM 0.8.3 to - 0.14.1 contains an information disclosure caused by leaking a heap address in error messages from the multimodal endpoint when processing invalid images, letting remote attackers reduce ASLR entropy, exploit requires sending invalid images. id: CVE-2026-22778 info: name: vLLM 0.8....

SiYuan Note - Cross-Site Scripting

Unauthenticated reflected cross-site scripting XSS vulnerability in all versions of SiYuan Note containing /api/icon/getDynamicIcon with unsafe type=8 rendering logic. Attacker-controlled content is inserted directly into SVG output without proper sanitization. An attacker can execute arbitrary...

app

Standard Notes Standard Notes es una aplicación para tomar notas cifrada de extremo a extremo, pensada para digitalistas y profesionales. Captura tus notas, archivos y el trabajo de tu vida en un solo lugar seguro. ¿Por qué Standard Notes? Sincronización cifrada de extremo a extremo. Solo tú pued...

ThreatPad

ThreatPad 一个为网络威胁情报（CTI）和安全运营团队打造的协同式、实时笔记平台。 ThreatPad 结合了现代生产力工具的速度与 CTI 特定的功能：IOC 自动提取、STIX 2.1 导出、结构化威胁模板和细粒度访问控制。 在线演示 — 使用 [email protected] / password123 登录 功能特性 富文本编辑器 — 所见即所得，支持语法高亮、表格、任务列表、编辑/预览切换 绘图与图表 — 全页 Excalidraw 画布，用于攻击流程图、网络图和工作流。也可作为内联绘图块嵌入到文本笔记中。 IOC 自动提取 — 从笔记内容中检测...

CVE-2023-50072

CVE-2023-50072 OpenKM 7.1.40 版本（dbb6e88，带专业扩展）中存在一个存储型跨站脚本（XSS）漏洞，允许经过身份验证的用户在文件上上传笔记，该笔记充当存储型XSS载荷。任何打开文档文件笔记的用户都将触发XSS。 易受攻击参数：text 漏洞利用 - 概念验证（POC） 反射型跨站脚本（XSS） root@kitploit: Payload : FINAL Payload URL encoded : GET 请求在 http://localhost/openkm/rest/note/nodes/NODE-ID 上： root@kitploit: POST...

NotaMy

🇬🇧 Inglés| 🇮🇹 Italiano ---|--- 🧠 NotaMy NotaMy es un gestor jerárquico de notas técnicas basado en terminal, diseñado para reducir el costo mental de cambiar de contexto en tareas de análisis de larga duración pentesting, ingeniería inversa, wargames. 🎯 Por qué se creó NotaMy Cuando empecé a...

hardening-k8s-containers

Intentionally Vulnerable Note Taking Application This repository contains a very simple and vulnerable application used to demonstrate the differences between deploying this application with the default settings to a Kubernetes cluster, versus adding some extra security settings that WILL NOT fix...

beacon_health_check

Beacon Health Check Aggressor Script Joe Vest Twitter: @joevest Description This aggressor script uses a beacon's note field to indicate the health status of a beacon. This is done by ... Tracking each beacon's current sleep/jitter time Calculating health based on a "max expected check in time"...

CVE-2014-4322_adaptation

CVE-2014-4322adaptation 只是尝试适配 Note 4，我并不清楚自己在做什么。 目前有一种通过 ADB 写入系统的方法（CVE-2014-7951 和 CVE-2014-7953）。 zxz0O0 已确认写入系统有效。 我们需要的是获取系统 UID 以执行 CVE-2014-4322。 我目前正在研究 CVE-2014-4322 的工作原理，看看能否将其封装在 APK 中（giefroot 可能已经实现了这一点）。 然后再检查安装 SuperUser 的使用条款。 如果有人碰巧看到这个，我完全是个新手，完全不知道自己在做什么。...

cve-2013-3319

cve-2013-3319 metasploit 模块，用于 CVE-2013-3319 / SAP Security Note 1816536 已弃用 ：使用 metasploit 中的 saphostctrlgetcomputersystem。仅出于历史目的保留。 完整公告：http://labs.integrity.pt/advisories/cve-2013-3319/...

CVE-2024-41662

CVE-2024-41662 Markdown XSS conduce a RCE en VNote versión NOTA: La aplicación valida correctamente algunos payloads JavaScript mediante la codificación de salida en la aplicación. Sin embargo, falla en validar en ciertos casos...

CVE-2026-87797 Client Invoicing by Sprout Invoices < 20.8.16 - Subscriber+ Private Note Overwrite via si_edit_private_note

The Sprout Invoices WordPress plugin before 20.8.16 does not perform a capability or ownership check before allowing a private note to be overwritten through one of its AJAX actions, allowing any authenticated user such as a subscriber to overwrite private notes on records belonging to other user...

CVE-2026-87797

The Sprout Invoices WordPress plugin before 20.8.16 has a missing authorization check on the si_edit_private_note AJAX action. Because no capability or ownership verification is performed, any authenticated user with the subscriber role (or higher) can overwrite private notes belonging to other u...

threat_note

Please check out https://www.threatnote.io for the latest threatnote...

TJ-OPT

TJ-OPT Fecha de lanzamiento 9 de septiembre de 2024 Introducción Como pentester, hay muchos recursos excelentes, hojas de referencia y guías que contienen una gran cantidad de información valiosa. Sin embargo, puede resultar frustrante y llevar mucho tiempo encontrar estas notas o recursos que...

obsidian-note-toolbar-PoC

Ejecución de Código Arbitrario Dirigida por Frontmatter en Note Toolbar mediante la Cadena de Variables propNAME → js: Estado del CVE: solicitado, pendiente de asignación. Este hallazgo se publica como GHSA-q8cw-3m8c-5pf2. Tras la asignación del CVE, este repositorio se renombra a...