sandcat

Sandcat 浏览器 Sandcat 是一款轻量级多标签网页浏览器，结合了 Chromium 和 Lua 的速度与功能。它内置实时请求头、可扩展的用户界面与命令行控制台、资源查看器，以及许多对 Web 开发人员和渗透测试人员有用的功能，尤其适用于检查实时 Web 应用。如需更多详情，请访问 http://www.syhunt.com/sandcat/。另请参阅下面的 docs 目录和致谢部分，了解有关 Sandcat 架构的更多信息。 目录 /docs - Lua API 文档 /packs - 未压缩包文件的内容 /Common - 通用...

WebView2-Cookie-Stealer

Entrada de blog Por favor, lea esta entrada de blog para obtener más información. Código fuente Este código es una versión modificada del Código WebView2 de Microsoft. El código actual puede limpiarse y mejorarse mucho. Demostración Ejemplo de inicio Ejemplo de uso Uso Probado en Windows 10 y 11...

LabubaRAT Masquerades as NVIDIA Software to Control Windows Hosts

Cybersecurity researchers have flagged a previously undocumented Rust-based remote access trojan RAT codenamed LabubaRAT that masquerades as NVIDIA software to blend into target environments. "LabubaRAT creates a reusable foothold for hands-on activity," Blackpoint Cyber researchers Sam Decker an...

EUVD-2023-28882

Malicious code in bioql PyPI...

EUVD-2023-26990

Malicious code in bioql PyPI...

EUVD-2024-26096

Malicious code in bioql PyPI...

Hackers Exploit Webview2 to Deploy CoinLurker Malware and Evade Security Detection

Bogus software update lures are being used by threat actors to deliver a new stealer malware called CoinLurker. "Written in Go, CoinLurker employs cutting-edge obfuscation and anti-analysis techniques, making it a highly effective tool in modern cyber attacks," Morphisec researcher Nadav Lorber...

PVS 2402 | Console Setup: EdgeWebView2 not installing correctly

When launching the "Console Installer" it tries to install the prerequired software which includes Edge WebView2. In some cases when installing it from the iso, Edge WebView2 might not show up in "appwiz.cpl" or "Apps and Features". If you start the "Console Installer" again it is shown as "not...

The vulnerability of the Webview2 control in the Microsoft Edge browser allows attackers to perform spoofing attacks.

The vulnerability of the Webview2 control in Microsoft Edge exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow attackers to perform spear-phishing attacks...

Microsoft Edge (Chromium-based) Webview2 Spoofing Vulnerability

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. A spoofing vulnerability exists in Microsoft Edge Chromium-based Webview2, which can be exploited by attackers to conduct spoofing attacks...

Microsoft Edge (Chromium-Based) Multiple Vulnerabilities - Apr24

Microsoft Edge Chromium-Based is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2024-29049

Microsoft Edge Chromium-based Webview2 Spoofing Vulnerability...

CVE-2024-29049

Microsoft Edge Chromium-based Webview2 Spoofing Vulnerability...

CVE-2024-29049

CVE-2024-29049 describes a spoofing vulnerability in Microsoft Edge (Chromium-based) that involves the Edge WebView2 component. Connected sources consistently identify the affected element as the WebView2 surface used by Edge’s Chromium-based browser, resulting in spoofing of the user interface. ...

CVE-2024-29049 Microsoft Edge (Chromium-based) Webview2 Spoofing Vulnerability

...

Microsoft Edge (Chromium-based) Webview2 Spoofing Vulnerability

...

Microsoft Edge (Chromium) < 122.0.2365.120 / 123.0.2420.81 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 122.0.2365.120 / 123.0.2420.81. It is, therefore, affected by multiple vulnerabilities as referenced in the April 4, 2024 advisory. - Microsoft Edge Chromium-based Webview2 Spoofing Vulnerability CVE-2024-29049 -...

Microsoft Edge 安全漏洞

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. A spoofing vulnerability exists in Microsoft Edge Chromium-based Webview2, which can be exploited by attackers to conduct spoofing attacks...

Zoom Client for Meetings < 5.13.3 Vulnerability (ZSB-23001)

The version of Zoom Client for Meetings installed on the remote host is prior to 5.13.3. It is, therefore, affected by a vulnerability as referenced in the ZSB-23001 advisory. - Zoom for Windows clients before version 5.13.3, Zoom Rooms for Windows clients before version 5.13.5 and Zoom VDI for...

Beware: New DoubleFinger Loader Targets Cryptocurrency Wallets with Stealer

A novel multi-stage loader called DoubleFinger has been observed delivering a cryptocurrency stealer dubbed GreetingGhoul in what's an advanced attack targeting users in Europe, the U.S., and Latin America. "DoubleFinger is deployed on the target machine, when the victim opens a malicious PIF...