CVE-2024-22891

PoC de Nteract Una prueba de concepto para la vulnerabilidad CVE-2024-22891. nteract 0.28.0 permite webview de Electron a través de enlace Markdown, con la consiguiente ejecución remota de código. En este repositorio hay un ejemplo de aplicación vulnerable y un exploit de prueba de concepto PoC d...

CVE-2024-25291

DeskFiler RCE Una prueba de concepto para la vulnerabilidad CVE-2024-25291. deskfiler - 1.2.3 permite Electron webview en la aplicación, con el consiguiente código remoto En este repositorio hay un ejemplo de aplicación vulnerable y un exploit de prueba de concepto POC de la misma. Como PoC, hay ...

CVE-2024-25292

RenderTune RCE A Proof-Of-Concept for CVE-2024-25292 vulnerability. A cross-site scripting XSS vulnerability in RenderTune v1.1.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Upload Title parameter. In this repository there is an example...

EUVD-2020-30263

Malware in sbrugna...

CVE-2020-9443

Zulip Desktop before 4.0.3 loaded untrusted content in an Electron webview with web security disabled, which can be exploited for XSS in a number of ways. This especially affects Zulip Desktop 2.3.82...

Exploit for Code Injection in Deskfiler

DeskFiler RCE A Proof-Of-Concept for CVE-2024-25291 vulnerabi...

Exploit for Open Redirect in Nteract

Nteract PoC A Proof-Of-Concept for CVE-2024-22891 vulnerabilit...

CVE-2020-9443

Zulip Desktop before 4.0.3 loaded untrusted content in an Electron webview with web security disabled, which can be exploited for XSS in a number of ways. This especially affects Zulip Desktop 2.3.82...

Design/Logic Flaw

Zulip Desktop before 4.0.3 loaded untrusted content in an Electron webview with web security disabled, which can be exploited for XSS in a number of ways. This especially affects Zulip Desktop 2.3.82...

CVE-2020-9443

CVE-2020-9443 affects Zulip Desktop prior to 4.0.3. The issue arises from loading untrusted content in an Electron webview with web security disabled, enabling cross-site scripting (XSS) in multiple ways. The vulnerability notably impacts Zulip Desktop 2.3.82. The public documentation notes this ...