androrat

अंतर्राष्ट्रीयकरण प्रगति पर है, शामिल होने के लिए आपका स्वागत है। Androrat फ़ोर्क/साइलेंट संस्करण एंड्रॉइड के लिए रिमोट प्रशासन उपकरण Androrat एक क्लाइंट/सर्वर एप्लिकेशन है जो क्लाइंट-साइड के लिए Java Android में और सर्वर के लिए Java/Swing में विकसित किया गया है। Androrat नाम Android और RAT रिमोट...

hm-surf

HM-Surf evaluator يُقيّم قابلية التأثر بـ CVE-2024-44133 لمتصفحات macOS الشائعة. يحتوي أيضًا على HTML يلتقط لقطة شاشة ويقوم بتنزيلها مع استخراج الموقع. الاستخدام - evaluator لتشغيل المُقيم، الذي يُقيّم CVE-2024-44133 على جميع متصفحات macOS الشائعة، قم بتشغيل: root@kitploit: python3 -m pip install...

CVE-2023-26818

अस्वीकरण यह एक्सप्लॉइट केवल अनुसंधान और प्रभावी रक्षात्मक तकनीकों के विकास के उद्देश्यों के लिए बनाया गया है। इसका उपयोग किसी भी दुर्भावनापूर्ण या अनधिकृत गतिविधियों के लिए अभिप्रेत नहीं है। लेखक और स्क्रिप्ट का स्वामी इस सॉफ़्टवेयर के किसी भी दुरुपयोग या क्षति के लिए कोई जिम्मेदारी या दायित्व...

android-c-sharp-rat-server

Android C R.A.T Server هذه إضافة مبنية لـ C R.A.T Server باستخدام نظام الإضافات. 1. لتثبيت هذه الإضافة، ضع ملف AndroidExtension.dll من AndroidExtension/bin/Debug إلى /TutServer/bin/Debug/scripts 2. ثم شغّل الخادم واختر تبويب Plugins. 3. اختر AndroidExtension.dll من القائمة وانقر على Execute. 4...

r4ven

Se trovi utile questo repository GitHub, considera di dargli una stella! ⭐️ ▶️ Guarda il video - Come usarlo! Questo progetto è uno strumento di ricerca e sensibilizzazione sulla sicurezza progettato per dimostrare come i browser web moderni possano esporre dati di localizzazione, accesso alla...

cameradar

Cameradar Strumento di accesso ai flussi RTSP Cameradar esegue la scansione degli endpoint RTSP su target autorizzati e utilizza attacchi a dizionario per forzare le loro credenziali e rotte. Cosa fa Cameradar Rileva host RTSP aperti su target accessibili. Rileva il modello del dispositivo che...

Flying Eagle Android RAT Traces Found on 170 Servers as Source Code Circulates

Source code for the Flying Eagle Android remote access trojan RAT framework is circulating through criminal Telegram channels. Hunt.io and independent researcher NetAskari traced matching control panels and certificates to 170 internet servers. They linked the framework to a fake "公安一网通办" Public...

CVE-2026-12989

A lack of authentication in the mobile app APK v5.5.0 for Ghost Robotics' Vision 60 robot allows an unauthenticated attacker connected to the device's internal Wi-Fi network to gain unrestricted access to the web administration interface and the HTTP API. Due to the lack of authorization...

Shark vacuum flaw exposes cameras, home maps and Wi-Fi passwords

Shark’s cloud-connected robot vacuums are currently exposed by an unpatched AWS Amazon Web Services IoT Internet of Things policy flaw that could turn one compromised device into a remote-control skeleton key for many others in the same region, with access to cameras, maps, and Wi‑Fi passwords. A...

CVE-2026-12060

Heptabase developed by Hepta Platforms has a Exposed Dangerous Method or Function vulnerability, allowing unauthenticated remote attackers to leverage social engineering techniques to trick a victim into opening or loading a malicious webpage within the Heptabase application, thereby gaining...

CVE-2026-12060 Hepta Platforms｜Heptabase - Exposed Dangerous

Heptabase developed by Hepta Platforms has a Exposed Dangerous Method or Function vulnerability, allowing unauthenticated remote attackers to leverage social engineering techniques to trick a victim into opening or loading a malicious webpage within the Heptabase application, thereby gaining...

CVE-2026-12060 Hepta Platforms｜Heptabase - Exposed Dangerous

Heptabase developed by Hepta Platforms has a Exposed Dangerous Method or Function vulnerability, allowing unauthenticated remote attackers to leverage social engineering techniques to trick a victim into opening or loading a malicious webpage within the Heptabase application, thereby gaining...

EUVD-2026-36390

Heptabase developed by Hepta Platforms has a Exposed Dangerous Method or Function vulnerability, allowing unauthenticated remote attackers to leverage social engineering techniques to trick a victim into opening or loading a malicious webpage within the Heptabase application, thereby gaining...

CVE-2026-12060

CVE-2026-12060 concerns Heptabase (Hepta Platforms) with an Exposed Dangerous Method or Function vulnerability. The description indicates unauthenticated remote attackers can leverage social engineering to persuade a victim to open or load a malicious webpage inside the Heptabase application, res...

PT-2026-48831

Heptabase developed by Hepta Platforms has a Exposed Dangerous Method or Function vulnerability, allowing unauthenticated remote attackers to leverage social engineering techniques to trick a victim into opening or loading a malicious webpage within the Heptabase application, thereby gaining...

CVE-2026-39309

Trilium Notes is a cross-platform, hierarchical note taking application focused on building large personal knowledge bases. In versions 0.102.1 and prior, the Electron configuration is vulnerable to TCC Bypass via Prompt Spoofing, allowing local attackers to trigger misleading macOS permission...

Astra Linux – Vulnerability in Firefox

When a user has already allowed a website to access the microphone and camera, disabling camera sharing does not completely prevent the website from re-enabling them without an additional prompt. This is only possible if the website continues to record with the microphone until the camera is...

CVE-2026-39309

Trilium Notes is a cross-platform, hierarchical note taking application focused on building large personal knowledge bases. In versions 0.102.1 and prior, the Electron configuration is vulnerable to TCC Bypass via Prompt Spoofing, allowing local attackers to trigger misleading macOS permission...

CVE-2026-39309 Trilium Notes: macOS TCC Bypass via Prompt Spoofing

Trilium Notes is a cross-platform, hierarchical note taking application focused on building large personal knowledge bases. In versions 0.102.1 and prior, the Electron configuration is vulnerable to TCC Bypass via Prompt Spoofing, allowing local attackers to trigger misleading macOS permission...

Yarbo responds to robot flaws that could mow down their owners

A researcher found that Yarbo yard robots came with a host of vulnerabilities which, among others, allowed an attacker to harvest WiFi passwords. Security researcher Andreas Makris found he could remotely hijack thousands of Yarbo yard robots worldwide, and proved it by having his mower run him...