229 matches found
CVE-2023-26818
免責事項 このエクスプロイトは、研究と効果的な防御技術の開発のみを目的として作成されました。悪意のある活動や不正な活動に使用することを意図したものではありません。著者およびスクリプトの所有者は、このソフトウェアによって引き起こされた誤用や損害について、一切の責任を負いません。ユーザーは、このソフトウェアを責任を持って、適用される法律および規制に従ってのみ使用することが求められます。非倫理的な用途には使用しないでください。 CVE-2023-26818 CVE-2023-26818 Telegramを使用したMacOS...
CVE-2023-27035
CVE-2023-27035 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N 脆弱性タイプ: 不適切なアクセス制御 説明: Obsidian Canvas 1.1.9 で発見された問題により、リモートの攻撃者がキャンバスページ上の埋め込みウェブサイトを介して、デスクトップ通知の送信、ユーザー音声の録音、その他の未指定の影響を引き起こす可能性があります。 影響: 悪意のある埋め込みウェブサイトは、ユーザーの許可や知識なしにObsidianアプリケーション内の機密性の高いWEB...
android-c-sharp-rat-server
Android C R.A.T Server This is a pulgin built for the C R.A.T Server with the plugin system. 1. To install this plugin place the AndroidExtension.dll file from AndroidExtension/bin/Debug to /TutServer/bin/Debug/scripts 2. Then start the server and select the Plugins tab. 3. Select...
Storm-Breaker
A Tool With Attractive Capabilities. Features: Obtain Device Information Without Any Permission ! Access Location SMARTPHONES Access Webcam Access Microphone Update Log: Second latest Update on November 4th , 2022 . The overall structure of the tool is programmed from the beginning and is availab...
wpair-app
WPair CVE-2025-36911（例: WhisperPair）脆弱性スキャナー＆研究ツール 特徴 • インストール • 使い方 • 動作の仕組み • 脆弱性 • クレジット 免責事項 このアプリケーションは @ZalexDev が個人の立場で作成した独自実装です。元の KU Leuven の研究者らはこの脆弱性を発見・開示しましたが、コードは一切公開しておらず、本プロジェクトとは関係ありません。クレジットへの記載は、彼らの研究貢献を称えることのみを目的としています。 概要 WPair は、Google の Fast Pair プロトコルにおける CVE-2025-36911...
CVE-2026-12060
Heptabase developed by Hepta Platforms has a Exposed Dangerous Method or Function vulnerability, allowing unauthenticated remote attackers to leverage social engineering techniques to trick a victim into opening or loading a malicious webpage within the Heptabase application, thereby gaining...
EUVD-2026-36390
Heptabase developed by Hepta Platforms has a Exposed Dangerous Method or Function vulnerability, allowing unauthenticated remote attackers to leverage social engineering techniques to trick a victim into opening or loading a malicious webpage within the Heptabase application, thereby gaining...
CVE-2026-12060 Hepta Platforms｜Heptabase - Exposed Dangerous
Heptabase developed by Hepta Platforms has a Exposed Dangerous Method or Function vulnerability, allowing unauthenticated remote attackers to leverage social engineering techniques to trick a victim into opening or loading a malicious webpage within the Heptabase application, thereby gaining...
CVE-2026-12060 Hepta Platforms｜Heptabase - Exposed Dangerous
Heptabase developed by Hepta Platforms has a Exposed Dangerous Method or Function vulnerability, allowing unauthenticated remote attackers to leverage social engineering techniques to trick a victim into opening or loading a malicious webpage within the Heptabase application, thereby gaining...
CVE-2026-12060
CVE-2026-12060 concerns Heptabase (Hepta Platforms) with an Exposed Dangerous Method or Function vulnerability. The description indicates unauthenticated remote attackers can leverage social engineering to persuade a victim to open or load a malicious webpage inside the Heptabase application, res...
PT-2026-48831
Heptabase developed by Hepta Platforms has a Exposed Dangerous Method or Function vulnerability, allowing unauthenticated remote attackers to leverage social engineering techniques to trick a victim into opening or loading a malicious webpage within the Heptabase application, thereby gaining...
CVE-2026-39309
Trilium Notes is a cross-platform, hierarchical note taking application focused on building large personal knowledge bases. In versions 0.102.1 and prior, the Electron configuration is vulnerable to TCC Bypass via Prompt Spoofing, allowing local attackers to trigger misleading macOS permission...
Astra Linux – Vulnerability in Firefox
When a user has already allowed a website to access the microphone and camera, disabling camera sharing does not completely prevent the website from re-enabling them without an additional prompt. This is only possible if the website continues to record with the microphone until the camera is...
CVE-2026-39309
Trilium Notes is a cross-platform, hierarchical note taking application focused on building large personal knowledge bases. In versions 0.102.1 and prior, the Electron configuration is vulnerable to TCC Bypass via Prompt Spoofing, allowing local attackers to trigger misleading macOS permission...
CVE-2026-39309 Trilium Notes: macOS TCC Bypass via Prompt Spoofing
Trilium Notes is a cross-platform, hierarchical note taking application focused on building large personal knowledge bases. In versions 0.102.1 and prior, the Electron configuration is vulnerable to TCC Bypass via Prompt Spoofing, allowing local attackers to trigger misleading macOS permission...
Browser Guard gets even better with Access Control
Have you ever been on a website when a pop-up suddenly asked for access to your camera, microphone, location, or notifications? Whether you clicked “allow,” dismissed it, or just wondered why it appeared, those permission requests aren’t always harmless. Some sites can abuse those permissions. Wi...
Exploit for CVE-2024-23700
PoC for CVE-2024-23700, allowing silently obtain permissions to...
DRILLAPP Backdoor Targets Ukraine, Abuses Microsoft Edge Debugging for Stealth Espionage
Ukrainian entities have emerged as the target of a new campaign likely orchestrated by threat actors linked to Russia, according to a report from S2 Grupo's LAB52 threat intelligence team. The campaign, observed in February 2026, has been assessed to share overlaps with a prior campaign mounted b...
Chrome flaw let extensions hijack Gemini’s camera, mic, and file access
Chrome’s Gemini “Live in Chrome” panel Gemini’s embedded, agent-style assistant mode within Chrome had a high‑severity vulnerability tracked as CVE‑2026‑0628. The flaw let a low‑privilege extension inject code into the Gemini side panel and inherit its powerful capabilities, including local file...