CVE-2026-73102 RustDesk Path Traversal via macOS Clipboard File-Paste

RustDesk versions 1.3.9 through 1.4.9 contain a path traversal vulnerability in the macOS clipboard file-paste code path. The application accepts peer-supplied file descriptor names and joins them to the selected target directory without requiring normalized relative paths. A remote peer in an...

CVE-2026-73102 RustDesk Path Traversal via macOS Clipboard File-Paste

RustDesk versions 1.3.9 through 1.4.9 contain a path traversal vulnerability in the macOS clipboard file-paste code path. The application accepts peer-supplied file descriptor names and joins them to the selected target directory without requiring normalized relative paths. A remote peer in an...

EUVD-2026-66379

Improper neutralization of path traversal sequences in TeamViewer Desktop Clients prior Version 15.81.5 allows an authenticated remote session participant to write files to unintended locations on the local file system via file transfer or virtual file clipboard mechanisms. An attacker can levera...

CVE-2024-37742

ANLEITUNG ZUR REPRODUKTION VON CVE-2024-37742:Clipboard Exploit in SEB ≤ 3.5.0 Windows...

BOF_Collection

BOFCollection Vari BOF per Cobalt Strike Requisiti beacon.h Per istruzioni di compilazione e panoramica sui BOF help-bof ActiveDirectory GetDomainInfo.c Restituisce informazioni sul dominio corrente e sul controller di dominio. inline-execute GetDomainInfo.o Raccolta GetClipboard.c Stampa qualsia...

CVE-2024-37742

CVE-2024-37742: Exploit degli Appunti in SEB ≤ 3.5.0 Windows Questo repository contiene una proof-of-concept PoC per sfruttare CVE-2024-37742, una vulnerabilità in Safe Exam Browser SEB ≤ 3.5.0 su Windows. La vulnerabilità consente a un utente malintenzionato di condividere i dati degli appunti t...

pyrexecd

PyRexecd PyRexecd è un server SSH autonomo per Windows. Caratteristiche: App Win32 autonoma non un servizio che risiede nella barra di sistema SysTray. Supporta un singolo utente / autenticazione solo tramite chiave pubblica. Notifica le connessioni in entrata tramite popup. Invia/Riceve il testo...

PasteZort

PasteZort Pastejacking - PasteZort Verwendung: ./PasteZort.py...

pulsegram

PulseGram PulseGram è un keylogger integrato con un bot Telegram. È uno strumento di monitoraggio che cattura sequenze di tasti, contenuti degli appunti e screenshot, inviando tutte le informazioni a un bot Telegram configurato. È progettato per l'uso in simulazioni di attacco e contesti di test ...

getaltname

GSAN - Get Subject Alternative Names GSAN is a tool that can extract Subject Alternative Names SAN found in SSL Certificates directly from https servers which can provide you with DNS names subdomains or virtual servers. It doesn't rely on Certificate Transparency logs, it connects directly to th...

pyrdp

PyRDP PyRDP è uno strumento e libreria Python per il Monster-in-the-Middle MITM del Remote Desktop Protocol RDP. Include alcuni strumenti: RDP Monster-in-the-Middle Registra le credenziali in testo chiaro o gli hash NetNTLM utilizzati durante la connessione Intercetta i dati copiati negli appunti...

burp-exporter

Exporter Extension for Burp Suite Community and Pro Follow us to know more about tips and others extensions Description Exporter is a Burp Suite extension to copy a request to a file or the clipboard as multiple programming languages functions. It also adds a tab called Exporter where you can...

EvilOSX

EvilOSX Eine böse RAT Remote Administration Tool für macOS / OS X. Marco Generator von Cedric Owens Dieses Projekt ist nicht mehr aktiv Funktionen Emuliere eine Terminal-Instanz Einfaches erweiterbares Modul-System Keine Bot-Abhängigkeiten reines Python Von Antiviren unerkannt OpenSSL AES-256...

webkitgtk: webkitgtk: A malicious website may silently hijack clipboard data

A flaw was found in WebKitGTK. A malicious website can silently hijack clipboard data due to improper state management...

webkitgtk: webkitgtk: A malicious website may silently hijack clipboard data

A flaw was found in WebKitGTK. A malicious website can silently hijack clipboard data due to improper state management...

pyradm

🔮 pyradm Remote administration crossplatfrom tool via telegram Coded with ❤️ python3 + aiogram3 https://t.me/whlab Screenshots Disclaimer All information contained in this repository is provided for educational and research purposes only The author is not responsible for any illegal use of this...

CVE-2026-7070-RDP-Clipboard-Hijacking-via-Virtual-Channel-Injection

CVE-2026-7070 – RDP-Zwischenablage-Entführung durch Virtual-Channel-Injection Programmcode Python – simulierte RDP-Zwischenablage root@kitploit: rdpserversim.py - Simulated RDP server with trusted virtual channel from http.server import HTTPServer, BaseHTTPRequestHandler import json, threading...

pyrexecd

PyRexecd PyRexecd is a standalone SSH server for Windows. Features: Standalone Win32 app not a service that resides in SysTray. Supports a single user / pubkey auth only. Notifies incoming connections via popup. Sends/Receives the clipboard text via stdin/stdout. PyPI Project page:...

PasteJacker

PasteJacker Lo scopo principale dello strumento è automatizzare l'attacco PasteJacking/Clipboard poisoning/comunque lo si voglia chiamare raccogliendo tutti i trucchi conosciuti usati in questo attacco in un unico posto e in un unico lavoro automatizzato, poiché dopo aver cercato ho scoperto che...

CVE-2026-76840

RustDesk's Windows clipboard redirection copies a peer-supplied length into a fixed-size caller buffer without an upper bound check. When an OLE paste consumer such as explorer.exe calls IStream::Read with a buffer of cb bytes, CliprdrStreamRead in libs/clipboard/src/windows/wfcliprdr.c requests...