Notion Web Clipper Command Injection Vulnerability

Notion is an application from Notion that integrates notes, knowledge base, data forms, Kanban, calendars, and many other capabilities into one application. A command injection vulnerability exists in Notion Web Clipper version 1.0.3, which stems from a NIB file that can be manipulated to execute...

PT-2024-20053 · Notion · Notion Web Clipper

Name of the Vulnerable Software and Affected Versions: Notion Web Clipper version 1.0.37 Description: The Notion Web Clipper is susceptible to the Dirty NIB attack, where .nib files can be manipulated to execute arbitrary commands. Even if a .nib file is modified within an application, Gatekeeper...

CVE-2024-23743

Notion through 3.1.0 on macOS might allow code execution because of RunAsNode and enableNodeClilnspectArguments. NOTE: the vendor states "the attacker must launch the Notion Desktop application with nonstandard flags that turn the Electron-based application into a Node.js execution environment."...

CVE-2024-23743

Notion through 3.1.0 on macOS might allow code execution because of RunAsNode and enableNodeClilnspectArguments. NOTE: the vendor states "the attacker must launch the Notion Desktop application with nonstandard flags that turn the Electron-based application into a Node.js execution environment."...

Design/Logic Flaw

Notion through 3.1.0 on macOS might allow code execution because of RunAsNode and enableNodeClilnspectArguments. NOTE: the vendor states "the attacker must launch the Notion Desktop application with nonstandard flags that turn the Electron-based application into a Node.js execution environment."...

CVE-2024-23743

Notion through 3.1.0 on macOS might allow code execution because of RunAsNode and enableNodeClilnspectArguments. NOTE: the vendor states "the attacker must launch the Notion Desktop application with nonstandard flags that turn the Electron-based application into a Node.js execution environment."...

Notion Security Breach

Notion is an application from Notion that integrates notes, knowledgebase, datagrid, kanban, calendar, and other capabilities into one application. A security vulnerability exists in Notion prior to version 3.1.0 that stems from arbitrary code execution via the RunAsNode and...

CVE-2024-23743

Notion through 3.1.0 on macOS might allow code execution because of RunAsNode and enableNodeClilnspectArguments. NOTE: the vendor states "the attacker must launch the Notion Desktop application with nonstandard flags that turn the Electron-based application into a Node.js execution environment."...

CVE-2024-23743

Notion Desktop for macOS up to version 3.1.0 is affected. The vulnerability stems from RunAsNode and enableNodeClilnspectArguments, enabling code execution when the Notion Electron app is launched with nonstandard flags that turn it into a Node.js execution environment. Affected versions

PT-2024-20051 · Notion · Notion

Name of the Vulnerable Software and Affected Versions: Notion versions prior to 3.1.0 Description: The issue might allow code execution because of RunAsNode and enableNodeClilnspectArguments. The vendor states that the attacker must launch the Notion Desktop application with nonstandard flags tha...

WordPress Notionify - WordPress, WooCommerce, Contact form 7 integration with notion. Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)

Software Notionify - WordPress, WooCommerce, Contact form 7 integration with notion. Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership...

New Atomic macOS Malware Steals Keychain Passwords and Crypto Wallets

Threat actors are advertising a new information stealer for the Apple macOS operating system called Atomic macOS Stealer or AMOS on Telegram for $1,000 per month, joining the likes of MacStealer. "The Atomic macOS Stealer can steal various types of information from the victim's machine, including...

MAL-2022-4928 Malicious code in notion-intl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8151dcd2427ad2cb147e1aed75dfec8b60d389c600877207d0092c09139d0942 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in notion-intl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8151dcd2427ad2cb147e1aed75dfec8b60d389c600877207d0092c09139d0942 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview notion-intl is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

OffensiveNotion - Notion As A Platform For Offensive Operations

Notion yes, the notetaking app as a C2. Wait, What? Yes. But Why? What started as a meme grew into a full project. Just roll with it. Read more! Here's our blog post about it: We Put A C2 In Your Notetaking App: OffensiveNotion Features A full-featured C2 platform built on the Notion notetaking...

notionpress.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1015861 Security Researcher g0bl1nsec Helped patch 3768 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting notionpress.com website a...