r4ven

Если вы считаете этот репозиторий GitHub полезным, пожалуйста, поставьте звезду! ⭐️ ▶️ Смотреть видео - Как использовать! Этот проект представляет собой инструмент для исследований и повышения осведомленности в области безопасности, предназначенный для демонстрации того, как современные...

CVE-2023-26818

Отказ от ответственности Этот эксплойт создан исключительно в исследовательских целях и для разработки эффективных методов защиты. Он не предназначен для использования в каких-либо вредоносных или несанкционированных действиях. Автор и владелец скрипта снимают с себя любую ответственность за...

cameradar

Cameradar Инструмент доступа к RTSP-потокам Cameradar сканирует RTSP-конечные точки на авторизованных целях и с помощью атак по словарю подбирает их учётные данные и маршруты. Что делает Cameradar Обнаруживает открытые RTSP-хосты на доступных целях. Определяет модель устройства, передающего...

androrat

국제화 작업을 진행 중입니다. 참여를 환영합니다. Androrat Fork/Silent Edition Android용 원격 관리 도구 Androrat는 클라이언트/서버 애플리케이션으로, 클라이언트 측은 Java Android로, 서버는 Java/Swing으로 개발되었습니다. Androrat라는 이름은 Android와 RATRemote Access Tool의 합성어입니다. 4명으로 구성된 팀이 대학 프로젝트로 개발했으며, 한 달 만에 완성되었습니다. 이 애플리케이션의 목표는 Android 시스템을 원격으로 제어하고 그로부터 정보...

hm-surf

Оценщик HM-Surf Оценивает подверженность обычных браузеров macOS уязвимости CVE-2024-44133. Также содержит HTML, который делает скриншот и скачивает его вместе с извлечением местоположения. Использование - оценщик Чтобы запустить оценщик, который оценивает CVE-2024-44133 на всех обычных браузерах...

android-c-sharp-rat-server

Android C R.A.T Server 이것은 C R.A.T Server의 플러그인 시스템을 위해 구축된 플러그인입니다. 1. 이 플러그인을 설치하려면 AndroidExtension/bin/Debug에 있는 AndroidExtension.dll 파일을 /TutServer/bin/Debug/scripts에 복사하십시오. 2. 그런 다음 서버를 시작하고 Plugins 탭을 선택하십시오. 3. 목록에서 AndroidExtension.dll을 선택하고 Execute를 클릭하십시오. 4. 서버 포트클라이언트에 사용하는 것과 동일한 포...

Astra Linux – Vulnerability in Firefox

When a user has already allowed a website to access the microphone and camera, disabling camera sharing does not completely prevent the website from re-enabling them without an additional prompt. This is only possible if the website continues to record with the microphone until the camera is...

Flying Eagle Android RAT Traces Found on 170 Servers as Source Code Circulates

Source code for the Flying Eagle Android remote access trojan RAT framework is circulating through criminal Telegram channels. Hunt.io and independent researcher NetAskari traced matching control panels and certificates to 170 internet servers. They linked the framework to a fake "公安一网通办" Public...

CVE-2026-12989

A lack of authentication in the mobile app APK v5.5.0 for Ghost Robotics' Vision 60 robot allows an unauthenticated attacker connected to the device's internal Wi-Fi network to gain unrestricted access to the web administration interface and the HTTP API. Due to the lack of authorization...

Shark vacuum flaw exposes cameras, home maps and Wi-Fi passwords

Shark’s cloud-connected robot vacuums are currently exposed by an unpatched AWS Amazon Web Services IoT Internet of Things policy flaw that could turn one compromised device into a remote-control skeleton key for many others in the same region, with access to cameras, maps, and Wi‑Fi passwords. A...

CVE-2026-12060

Heptabase developed by Hepta Platforms has a Exposed Dangerous Method or Function vulnerability, allowing unauthenticated remote attackers to leverage social engineering techniques to trick a victim into opening or loading a malicious webpage within the Heptabase application, thereby gaining...

CVE-2026-12060 Hepta Platforms｜Heptabase - Exposed Dangerous

Heptabase developed by Hepta Platforms has a Exposed Dangerous Method or Function vulnerability, allowing unauthenticated remote attackers to leverage social engineering techniques to trick a victim into opening or loading a malicious webpage within the Heptabase application, thereby gaining...

CVE-2026-12060 Hepta Platforms｜Heptabase - Exposed Dangerous

Heptabase developed by Hepta Platforms has a Exposed Dangerous Method or Function vulnerability, allowing unauthenticated remote attackers to leverage social engineering techniques to trick a victim into opening or loading a malicious webpage within the Heptabase application, thereby gaining...

EUVD-2026-36390

Heptabase developed by Hepta Platforms has a Exposed Dangerous Method or Function vulnerability, allowing unauthenticated remote attackers to leverage social engineering techniques to trick a victim into opening or loading a malicious webpage within the Heptabase application, thereby gaining...

CVE-2026-12060

CVE-2026-12060 concerns Heptabase (Hepta Platforms) with an Exposed Dangerous Method or Function vulnerability. The description indicates unauthenticated remote attackers can leverage social engineering to persuade a victim to open or load a malicious webpage inside the Heptabase application, res...

PT-2026-48831

Heptabase developed by Hepta Platforms has a Exposed Dangerous Method or Function vulnerability, allowing unauthenticated remote attackers to leverage social engineering techniques to trick a victim into opening or loading a malicious webpage within the Heptabase application, thereby gaining...

CVE-2026-39309

Trilium Notes is a cross-platform, hierarchical note taking application focused on building large personal knowledge bases. In versions 0.102.1 and prior, the Electron configuration is vulnerable to TCC Bypass via Prompt Spoofing, allowing local attackers to trigger misleading macOS permission...

CVE-2026-39309

Trilium Notes is a cross-platform, hierarchical note taking application focused on building large personal knowledge bases. In versions 0.102.1 and prior, the Electron configuration is vulnerable to TCC Bypass via Prompt Spoofing, allowing local attackers to trigger misleading macOS permission...

CVE-2026-39309 Trilium Notes: macOS TCC Bypass via Prompt Spoofing

Trilium Notes is a cross-platform, hierarchical note taking application focused on building large personal knowledge bases. In versions 0.102.1 and prior, the Electron configuration is vulnerable to TCC Bypass via Prompt Spoofing, allowing local attackers to trigger misleading macOS permission...

Yarbo responds to robot flaws that could mow down their owners

A researcher found that Yarbo yard robots came with a host of vulnerabilities which, among others, allowed an attacker to harvest WiFi passwords. Security researcher Andreas Makris found he could remotely hijack thousands of Yarbo yard robots worldwide, and proved it by having his mower run him...