CVE-2026-Discord

Informe de Vulnerabilidad Crítica: Cliente de Discord para macOS Fecha : 2026-01-25 Objetivo : Cliente de Discord macOS Stable 0.0.373 Autor : Antigravity 🚨 Resumen Ejecutivo Hemos identificado una vulnerabilidad de seguridad crítica en el Cliente de Discord para macOS basado en Electron que...

Fermion

Fermion Fermion은 frida-node와 monaco-editor를 래핑하는 electron 애플리케이션입니다. 단일 UI를 통해 Frida 스크립트를 프로토타이핑하고, 테스트하고, 다듬을 수 있는 완전한 통합 환경을 제공합니다. Monaco가 통합됨에 따라 Visual Studio Code에서 기대할 수 있는 모든 기능린팅, IntelliSense, 키 바인딩 등을 사용할 수 있습니다. 또한 Fermion은 Frida API에 대한 TypeScript 언어 정의를 포함하므로 Frida 스크립트를 쉽게 작성할 수...

NetScope

NetScope Offline-first network investigation and response platform for Windows. NetScope is a desktop application for security analysts, incident responders, and CTF players. It takes a packet capture .pcap / .pcapng or a live interface and turns it into a complete, evidence-backed investigation ...

myNetwork

myNetwork Cross-platform LAN & port scanner with a Windows XP–style desktop GUI. Discovers hosts on your segment, resolves names, MAC and vendor, and reports open TCP + UDP ports — with live monitoring and export. Screenshot shows synthetic demo data. Download Direct download of the latest releas...

AhMyth-Android-RAT

AhMyth Android Rat Beta Version It consists of two parts : Server side : desktop application based on electron framework control panel Client side : android application backdoor Getting Started You have two options to install it 1 From source code Prerequisite : Electron to start the app Java to...

CVE-2026-22804

PoC de XSS Almacenado en Termix GHSA-m3cv-5hgp-hv35 Este repositorio contiene una Prueba de Concepto PoC de explotación para la vulnerabilidad de Cross-Site Scripting XSS Almacenado en Termix, que puede provocar Inclusión de Archivos Locales LFI en el entorno Electron y Secuestro de Sesión...

electroniz3r

electroniz3r electroniz3r로 macOS Electron 앱의 TCC 권한을 탈취하세요. 이 도구는 라스베이거스에서 열린 DEFCON31에서 제 ELECTRONizing macOS privacy - a new weapon in your red teaming armory 발표에서 처음 소개되었습니다. 개요 root@kitploit: $ electroniz3r OVERVIEW: macOS Red Teaming tool that allows code injection in Electron apps by Wojcie...

CVE-2026-Termius

Termius macOS Application Vulnerability Report CVE-2026-Termius Target : Termius macOS Version Tested : Latest as of Jan 2026 Impact : Remote Code Execution RCE, Local Privilege Escalation LPE, App Security Bypass 🚨 Executive Summary Three critical vulnerabilities were identified in the Termius...

Hacking-Electron-Apps-CVE-2020-35717-

Hacking-Electron-Apps-CVE-2020-35717-...

CVE-2026-86711

electerm before 5.3.15 exposes 40+ main-process functions through an unvalidated Electron IPC handler with no function-name allowlist or sender validation. Renderer-side script execution can invoke openFileWithEditor and other functions with arbitrary arguments to execute system commands in the...

CVE-2026-86712

SiYuan before 3.8.2 trusts the attacker-writable text/siyuan clipboard MIME type and skips sanitization in the paste handler, allowing code execution in the Node-enabled desktop renderer. Attackers can craft malicious web pages that write to the clipboard, and when pasted into SiYuan, injected...

CVE-2026-86712 SiYuan before 3.8.2 Remote Code Execution via Clipboard

SiYuan before 3.8.2 trusts the attacker-writable text/siyuan clipboard MIME type and skips sanitization in the paste handler, allowing code execution in the Node-enabled desktop renderer. Attackers can craft malicious web pages that write to the clipboard, and when pasted into SiYuan, injected...

EUVD-2026-72688

SiYuan before 3.8.2 trusts the attacker-writable text/siyuan clipboard MIME type and skips sanitization in the paste handler, allowing code execution in the Node-enabled desktop renderer. Attackers can craft malicious web pages that write to the clipboard, and when pasted into SiYuan, injected...

CVE-2026-86712 SiYuan before 3.8.2 Remote Code Execution via Clipboard

SiYuan before 3.8.2 trusts the attacker-writable text/siyuan clipboard MIME type and skips sanitization in the paste handler, allowing code execution in the Node-enabled desktop renderer. Attackers can craft malicious web pages that write to the clipboard, and when pasted into SiYuan, injected...

CVE-2026-86712

SiYuan before 3.8.2 is an Electron-based note-taking application vulnerable to Remote Code Execution via its clipboard paste handler. The root cause is that SiYuan trusts the attacker-writable text/siyuan clipboard MIME type and skips sanitization in the paste handler (app/src/protyle/util/paste....

EUVD-2026-72687

electerm before 5.3.15 exposes 40+ main-process functions through an unvalidated Electron IPC handler with no function-name allowlist or sender validation. Renderer-side script execution can invoke openFileWithEditor and other functions with arbitrary arguments to execute system commands in the...

CVE-2026-86711

electerm versions before 5.3.15 are affected by an arbitrary command execution vulnerability in the runGlobalAsync Electron IPC handler (src/app/lib/ipc.js). The handler exposes over 40 main-process functions without a function-name allowlist or sender validation, allowing renderer-side script ex...

CVE-2026-86711 electerm before 5.3.15 Arbitrary Command Execution via Unvalidated runGlobalAsync IPC Bridge

electerm before 5.3.15 exposes 40+ main-process functions through an unvalidated Electron IPC handler with no function-name allowlist or sender validation. Renderer-side script execution can invoke openFileWithEditor and other functions with arbitrary arguments to execute system commands in the...

CVE-2026-86711 electerm before 5.3.15 Arbitrary Command Execution via Unvalidated runGlobalAsync IPC Bridge

electerm before 5.3.15 exposes 40+ main-process functions through an unvalidated Electron IPC handler with no function-name allowlist or sender validation. Renderer-side script execution can invoke openFileWithEditor and other functions with arbitrary arguments to execute system commands in the...

CVE-2020-15215-Discord-POC

Discord Electron ISO 경계 검증 PoC 범위 이 저장소는 Discord 스타일 데스크톱 아키텍처에서 Electron 경계 강화를 위한 개념 증명PoC 검증 하네스입니다. 렌더러/메인 프로세스 분리, 프리로드 브리지 정책, IPC 채널 노출, 내비게이션 제어, 런타임 감독을 모델링하여 잘못된 구성이 애플리케이션의 격리 보장을 어떻게 약화시킬 수 있는지 연구합니다. 참조 사례 세부 정보는 다음에서 추적됩니다: https://bugbounty.com/211356433 취약점 컨텍스트 이 사례 연구는 Electron...