1946 matches found
selinux-notebook
The SELinux Notebook Introduction The SELinux Notebook is an Open Source book on SELinux, originally created by Richard Haines and donated to the SELinux community. The Notebook's goal is to be the most current and comprehensive book on SELinux, covering the Linux Kernel components, the userspace...
petereport
PeTeReport PeTeReport Pe nTe st Report is an open-source application vulnerability reporting tool designed to assist pentesting/redteaming efforts, by simplifying the task of writting and generation of reports. Focused in product security, the tool help security researchers and pentesters to...
CVE-2026-39987
ā ļø CVE-2026-39987 ā Unauthenticated Shell in marimo 0.23.0 A reactive Python notebook tool gave attackers a full shell in one WebSocket request. š Overview CVE-2026-39987 is a critical pre-auth RCE vulnerability in marimo ā a popular open-source reactive notebook for Python modern Jupyter...
CVE-2025-63848
CVE-2025-63848 swish-prolog cve Stored cross site scripting xss vulnerability in SWISH prolog thru 2.2.0 allowing attackers to execute arbitrary code via crafted web IDE notebook. Impact One click Account takeover. Mitigation Upgrade to the latest version to mitigate the ATO...
CVE-2024-23997
YANA Notebook PoC A Proof-Of-Concept for CVE-2024-23997 vulnerability. 1. Vunerability Overview: Vulnerability Subject: Local Code Excution via XSS Vulnerability Version: = 1.0.16 Attack Type: Remote Code Execution Attack Vectors: To exploit the vulnerability, we must intercept an HTTP packet...
CVE-2025-40536-Analysis
CVE-2025-40536-Analysis victoriaalicex.github.io linearregressiontaxi.ipynb linearregressiontaxi.ipynb...
CVE-2026-39987
CVE-2026-39987 ā Marimo Pre-Auth RCE via Terminal WebSocket / / | / / / | \ / \ \ / / | // / \ / / | | / / // // / / // // \ / Status: Patched in 0.23.0 ā marimo-team/marimo@c24d480 Vulnerability The /terminal/ws endpoint lacks the validateauth call present in every other authenticated endpoint...
memOptix
memOptix This Jupyter notebook was created to assist DFIR professionals with triaging Windows memory dumps. Please note that this notebook was created based on the output generated from CrowdStrike's Supermem python script https://github.com/CrowdStrike/SuperMem. SuperMem triage mode 2 or 3 shoul...
lk_scraper
LinkedIn Scraper Scrapes Any LinkedIn Data Installation $ pip install git+git://github.com/jqueguiner/lkscraper Setup Using Docker compose $ docker-compose up -d $ docker-compose run lkscraper python3 Using Docker only for Selenium server First, you need to run a Selenium server $ docker run -d -...
CVE-2026-39987-marimo-rce
CVE-2026-39987 - Marimo Pre-Auth RCE Unauthenticated Remote Code Execution in Marimo via WebSocket Terminal š Overview CVE-2026-39987 is a critical Pre-Authentication Remote Code Execution vulnerability affecting Marimo versions prior to 0.23.0. The /terminal/ws WebSocket endpoint completely...
TJ-OSINT-Notebook
TJ-OSINT-Notebook Intial Release November 18th 2022 Main Purpose: This OSINT Notebook provides an overview of the tools, techniques, and resources that I use for a variety of situations for performing reconaissance and OSINT operations. This Notebook has helped me in many situations to learn more...
CitrixNetscalerAnalysis
Citrix Analysis Notebook A jupyter notebook to aid in automating some of the forensic analysis related to Citrix Netscaler hosts compromised via CVE-2019-19781. For help retrieving artifacts to examine see this Citrix triage script. All notes/suggestions are welcome. Feel free to submit pull...
ThreatHunting-JupyterNotebooks
š£ Weekly Purple Team - Threat Hunting Notebooks A collection of threat hunting and detection engineering Jupyter notebooks accompanying the Weekly Purple Team YouTube channel. Each notebook provides detection logic to help security professionals understand both offensive techniques and defensive...
CVE-2026-39987
CVE-2026-39987 ā Marimo Python Notebook Pre-Authenticated Remote Code Execution TL;DR A pre-authenticated remote code execution vulnerability in Marimo , an open-source Python notebook for data science and AI/ML. The terminal WebSocket endpoint /terminal/ws completely skips authentication...
rizin-notebook
Rizin Notebook A notebook for binary analysis with rizin. Keep notes, commands, and scripts organized per binary. Requires rizin 0.7.0 or later. What it does Each notebook page is tied to one binary. It stores the binary itself, its SHA-256 hash, and a list of cells : command cells - a rizin...
rizin-notebook
Rizin Notebook A notebook for binary analysis with rizin. Keep notes, commands, and scripts organized per binary. Requires rizin 0.7.0 or later. What it does Each notebook page is tied to one binary. It stores the binary itself, its SHA-256 hash, and a list of cells : command cells - a rizin...
JetBrains PyCharm < 2026.3 Safe Mode Code Execution
According to its self-reported version, the JetBrains PyCharm installation on the remote host is prior to 2026.3. It is, therefore, affected by a code execution vulnerability. In JetBrains PyCharm before 2026.3 code execution was possible in Safe Mode via a crafted Jupyter notebook widget module...
GHSA-9QQ5-422F-33C2 Velociraptor: Low-priv analyst reads arbitrary server files via ungated sql() VQL plugin
Summary The sql VQL plugin runs a caller-supplied database driver and connection string with no permission check vql/parsers/sql/sql.go:93, SQLPlugin.Call. For driver='mysql' or driver='postgres' the handle comes from GetHandleOther sql.go:39, which passes the connection string straight to Go...
