sonar.js

sonar.js A framework for identifying and launching exploits against internal network hosts. Works via WebRTC IP enumeration, WebSocket host scanning, and external resource fingerprinting. How does it work? Upon loading the sonar.js payload in a modern web browser the following will happen: sonar....

operative-framework

operative framework is a digital investigation framework, you can interact with multiple targets, execute multiple modules, create links with target, export rapport to PDF file, add note to target or results, interact with RESTFul API, write your own modules. important The project has undergone a...

Astra Linux – Vulnerability in Firefox and Thunderbird

Malicious websites could have caused Firefox to display the wrong origin when requesting the launch of a program and handling an external URL protocol. This vulnerability affects Firefox ESR 91.5, Firefox 96, and Thunderbird 91.5...

CVE-2026-25926

CVE-2026-25926 (Notepad++) is an Unsafe Search Path vulnerability (CWE-426) affecting Notepad++ versions prior to 8.9.2. The issue arises when launching explorer.exe without an absolute path, allowing an attacker who controls the process working directory to execute a malicious explorer.exe, pote...

Your New Marketing Assistant: The AI Expert in Akamai Campaign Builder

The AI Expert in Akamai Campaign Builder is now available to help you plan, build, and launch smarter campaigns — faster...

CVE-2025-12121

Lite XL versions 2.1.8 and prior contain a vulnerability in the system.exec function, which allowed arbitrary command execution through unsanitized shell command construction. This function was used in project directory launching core.lua, drag-and-drop file handling rootview.lua, and the “open i...

CVE-2025-12121 CVE-2025-12121

Lite XL versions 2.1.8 and prior contain a vulnerability in the system.exec function, which allowed arbitrary command execution through unsanitized shell command construction. This function was used in project directory launching core.lua, drag-and-drop file handling rootview.lua, and the “open i...

PT-2025-45079

Name of the Vulnerable Software and Affected Versions Samsung Members versions prior to 5.5.01.3 Description Improper input validation in Samsung Members allows remote attackers to connect to an arbitrary URL and launch arbitrary activity with Samsung Members privilege. User interaction is requir...

EUVD-2011-2498

Malware in sbrugna...

EUVD-2011-2499

Malware in sbrugna...

EUVD-2011-0184

Malware in sbrugna...

CVE-2025-31275

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.6. A sandboxed process may be able to launch any installed app...

CVE-2024-34723

In onTransact of ParcelableListBinder.java , there is a possible way to steal mAllowlistToken to launch an app from background due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Microsoft

Collateral Damage Collateral Damage is a kernel exploit for Xb...

gnome-shell, gnome-menus, and gnome-shell-extensions bug fix update

An update is available for gnome-menus. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list GNOME Shell acts as a compositing manager for the desktop, and displays...

Error: "HdxSdkErrorDomain_Session error 8" when launching desktop from iPad device.

Error: "HdxSdkErrorDomainSession error 8" when launching desktop from iPad device. Error message in Japanese: 「接続エラー サーバエラー。サーバはセッションを切断しました。」 「継続的なエラー 次の情報をIT部門にお知らせください：操作を完了できませんでした。HdxSdkErrorDomainSessionエラー8」...

Unable to Launch Desktop VDA with Rendezvous Protocol enabled.

Unable to launch the Desktop with Rendezvous Protocol enabled. Getting error as "Published Resource is not available currently. Contact your system admin for further assistance."...

Apple macOS Ventura Security Vulnerability

Apple macOS Ventura is a desktop operating system from Apple Inc. in the United States. A security vulnerability exists in Apple macOS Ventura 13.6, which stems from the fact that applications that fail authentication checks may still be launched...

CVE-2023-25749

Android applications with unpatched vulnerabilities can be launched from a browser using Intents, exposing users to these vulnerabilities. Firefox will now confirm with users that they want to launch an external application before doing so. This bug only affects Firefox for Android. Other version...

DEBIAN-CVE-2022-22748

Malicious websites could have confused Firefox into showing the wrong origin when asking to launch a program and handling an external URL protocol. This vulnerability affects Firefox ESR 91.5, Firefox 96, and Thunderbird 91.5...