Hacking-Electron-Apps-CVE-2020-35717-

Hacking-Electron-Apps-CVE-2020-35717-...

electroniz3r

electroniz3r 使用 electroniz3r 接管 macOS Electron 应用的 TCC 权限。该工具首次亮相于拉斯维加斯 DEFCON31 大会，在我的 ELECTRONizing macOS privacy - a new weapon in your red teaming armory 演讲中进行了展示。 概述 root@kitploit: $ electroniz3r OVERVIEW: macOS Red Teaming tool that allows code injection in Electron apps by Wojciech Reguła...

soundcloud-rpc 输入验证错误漏洞

soundcloud-rpc is a music client developed by Richard Habitzreuter, which supports Discord state synchronization and ad blocking. Versions of soundcloud-rpc prior to 0.1.8 had a vulnerability related to input validation errors. This vulnerability stemmed from the execution of song titles containi...