Lucene search
+L

2735 matches found

Kitploit
Kitploit
added 2026/09/12 1:36 p.m.6 views

CVE-2024-23746

CVE-2024-23746 Miro Desktop 0.8.18 en macOS permite inyección de código Electron. PoC firma y versión: herramienta utilizada para explorar la vulnerabilidad: https://github.com/r3ggi/electroniz3r verificar si es vulnerable: inyectar un Blind Shell: Referencias...

9.8CVSS8.2AI score0.01288EPSS
SaveExploits2References1
Kitploit
Kitploit
added 2026/09/12 6:34 a.m.9 views

CVE-2026-Discord

Informe de Vulnerabilidad Crítica: Cliente de Discord para macOS Fecha : 2026-01-25 Objetivo : Cliente de Discord macOS Stable 0.0.373 Autor : Antigravity 🚨 Resumen Ejecutivo Hemos identificado una vulnerabilidad de seguridad crítica en el Cliente de Discord para macOS basado en Electron que...

9.8CVSS8.2AI score0.01808EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/12 6:10 a.m.9 views

Fermion

Fermion Fermion is an electron application that wraps frida-node and monaco-editor. It offers a fully integrated environment to prototype, test and refine Frida scripts through a single UI. With the integration of Monaco come all the features you would expect from Visual Studio Code: Linting,...

6AI score
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/11 9:22 a.m.10 views

myNetwork

myNetwork Cross-platform LAN & port scanner with a Windows XP–style desktop GUI. Discovers hosts on your segment, resolves names, MAC and vendor, and reports open TCP + UDP ports — with live monitoring and export. Screenshot shows synthetic demo data. Download Direct download of the latest releas...

6AI score
SaveExploits0References6
Kitploit
Kitploit
added 2026/09/11 4:29 a.m.5 views

AhMyth-Android-RAT

AhMyth Android Rat Beta Version It consists of two parts : Server side : desktop application based on electron framework control panel Client side : android application backdoor Getting Started You have two options to install it 1 From source code Prerequisite : Electron to start the app Java to...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/10 3:15 p.m.6 views

CVE-2026-22804

PoC de XSS Almacenado en Termix GHSA-m3cv-5hgp-hv35 Este repositorio contiene una Prueba de Concepto PoC de explotación para la vulnerabilidad de Cross-Site Scripting XSS Almacenado en Termix, que puede provocar Inclusión de Archivos Locales LFI en el entorno Electron y Secuestro de Sesión...

8CVSS5.9AI score0.00201EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/09 6:15 p.m.11 views

electroniz3r

electroniz3r electroniz3r로 macOS Electron 앱의 TCC 권한을 탈취하세요. 이 도구는 라스베이거스에서 열린 DEFCON31에서 제 ELECTRONizing macOS privacy - a new weapon in your red teaming armory 발표에서 처음 소개되었습니다. 개요 root@kitploit: $ electroniz3r OVERVIEW: macOS Red Teaming tool that allows code injection in Electron apps by Wojcie...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/09 4:12 p.m.11 views

CVE-2026-Termius

Informe de vulnerabilidad de la aplicación Termius para macOS CVE-2026-Termius Objetivo : Termius macOS Versión probada : Última a enero de 2026 Impacto : Ejecución remota de código RCE, Escalada de privilegios local LPE, Omisión de la seguridad de la aplicación 🚨 Resumen ejecutivo Se identificar...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/09 12:33 p.m.7 views

Hacking-Electron-Apps-CVE-2020-35717-

Hacking-Electron-Apps-CVE-2020-35717-...

9CVSS8.1AI score0.03755EPSS
SaveExploits1
NVD
NVD
added 2026/09/08 12:16 p.m.3 views

CVE-2026-86711

electerm before 5.3.15 exposes 40+ main-process functions through an unvalidated Electron IPC handler with no function-name allowlist or sender validation. Renderer-side script execution can invoke openFileWithEditor and other functions with arbitrary arguments to execute system commands in the...

7.5CVSS0.00136EPSS
SaveExploits0References7
NVD
NVD
added 2026/09/08 12:16 p.m.4 views

CVE-2026-86712

SiYuan before 3.8.2 trusts the attacker-writable text/siyuan clipboard MIME type and skips sanitization in the paste handler, allowing code execution in the Node-enabled desktop renderer. Attackers can craft malicious web pages that write to the clipboard, and when pasted into SiYuan, injected...

8.8CVSS0.00376EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/09/08 11:23 a.m.24 views

CVE-2026-86712 SiYuan before 3.8.2 Remote Code Execution via Clipboard

SiYuan before 3.8.2 trusts the attacker-writable text/siyuan clipboard MIME type and skips sanitization in the paste handler, allowing code execution in the Node-enabled desktop renderer. Attackers can craft malicious web pages that write to the clipboard, and when pasted into SiYuan, injected...

8.8CVSS0.00376EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/09/08 11:23 a.m.6 views

EUVD-2026-72688

SiYuan before 3.8.2 trusts the attacker-writable text/siyuan clipboard MIME type and skips sanitization in the paste handler, allowing code execution in the Node-enabled desktop renderer. Attackers can craft malicious web pages that write to the clipboard, and when pasted into SiYuan, injected...

8.8CVSS0.00376EPSS
SaveExploits0References6
OSV
OSV
added 2026/09/08 11:23 a.m.9 views

CVE-2026-86712 SiYuan before 3.8.2 Remote Code Execution via Clipboard

SiYuan before 3.8.2 trusts the attacker-writable text/siyuan clipboard MIME type and skips sanitization in the paste handler, allowing code execution in the Node-enabled desktop renderer. Attackers can craft malicious web pages that write to the clipboard, and when pasted into SiYuan, injected...

8.6CVSS6.3AI score
SaveExploits0References8
CVE
CVE
added 2026/09/08 11:23 a.m.8 views

CVE-2026-86712

SiYuan before 3.8.2 is an Electron-based note-taking application vulnerable to Remote Code Execution via its clipboard paste handler. The root cause is that SiYuan trusts the attacker-writable text/siyuan clipboard MIME type and skips sanitization in the paste handler (app/src/protyle/util/paste....

8.8CVSS0.00376EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/09/08 11:23 a.m.4 views

EUVD-2026-72687

electerm before 5.3.15 exposes 40+ main-process functions through an unvalidated Electron IPC handler with no function-name allowlist or sender validation. Renderer-side script execution can invoke openFileWithEditor and other functions with arbitrary arguments to execute system commands in the...

7.5CVSS0.00136EPSS
SaveExploits0References7
CVE
CVE
added 2026/09/08 11:23 a.m.7 views

CVE-2026-86711

electerm versions before 5.3.15 are affected by an arbitrary command execution vulnerability in the runGlobalAsync Electron IPC handler (src/app/lib/ipc.js). The handler exposes over 40 main-process functions without a function-name allowlist or sender validation, allowing renderer-side script ex...

7.5CVSS0.00136EPSS
SaveExploits0References7
Cvelist
Cvelist
added 2026/09/08 11:23 a.m.24 views

CVE-2026-86711 electerm before 5.3.15 Arbitrary Command Execution via Unvalidated runGlobalAsync IPC Bridge

electerm before 5.3.15 exposes 40+ main-process functions through an unvalidated Electron IPC handler with no function-name allowlist or sender validation. Renderer-side script execution can invoke openFileWithEditor and other functions with arbitrary arguments to execute system commands in the...

7.5CVSS0.00136EPSS
SaveExploits0References7
OSV
OSV
added 2026/09/08 11:23 a.m.6 views

CVE-2026-86711 electerm before 5.3.15 Arbitrary Command Execution via Unvalidated runGlobalAsync IPC Bridge

electerm before 5.3.15 exposes 40+ main-process functions through an unvalidated Electron IPC handler with no function-name allowlist or sender validation. Renderer-side script execution can invoke openFileWithEditor and other functions with arbitrary arguments to execute system commands in the...

7.5CVSS6.4AI score
SaveExploits0References9
Kitploit
Kitploit
added 2026/09/07 8:38 p.m.4 views

CVE-2020-15215-Discord-POC

Discord Electron ISO Boundary Validation PoC Scope This repository is a proof-of-concept validation harness for Electron boundary hardening in Discord-style desktop architectures. It models renderer/main-process separation, preload bridge policy, IPC channel exposure, navigation controls, and...

6.8CVSS6.1AI score0.00683EPSS
SaveExploits0
Rows per page
Query Builder