229 matches found
Storm-Breaker
A Tool With Attractive Capabilities. Features: Obtain Device Information Without Any Permission ! Access Location SMARTPHONES Access Webcam Access Microphone Update Log: Second latest Update on November 4th , 2022 . The overall structure of the tool is programmed from the beginning and is availab...
android-c-sharp-rat-server
Android C R.A.T Server 이것은 C R.A.T Server의 플러그인 시스템을 위해 구축된 플러그인입니다. 1. 이 플러그인을 설치하려면 AndroidExtension/bin/Debug에 있는 AndroidExtension.dll 파일을 /TutServer/bin/Debug/scripts에 복사하십시오. 2. 그런 다음 서버를 시작하고 Plugins 탭을 선택하십시오. 3. 목록에서 AndroidExtension.dll을 선택하고 Execute를 클릭하십시오. 4. 서버 포트클라이언트에 사용하는 것과 동일한 포...
CVE-2023-26818
면책 조항 본 익스플로잇은 연구 및 효과적인 방어 기술 개발을 위한 목적으로만 제작되었습니다. 악의적이거나 허가되지 않은 활동에 사용하기 위한 것이 아닙니다. 작성자와 스크립트 소유자는 이 소프트웨어로 인한 오용이나 손해에 대한 어떠한 책임도 부인합니다. 사용자는 이 소프트웨어를 책임감 있게, 그리고 관련 법률 및 규정에 따라 사용해야 합니다. 비윤리적인 용도로 사용하지 마십시오. CVE-2023-26818 CVE-2023-26818 MacOS TCC 우회 익스플로잇 Telegram 사용. 샌드박스 우회에 대한 취약점 분석 1...
CVE-2023-27035
CVE-2023-27035 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N Тип уязвимости: Некорректный контроль доступа Описание: Обнаруженная проблема в Obsidian Canvas 1.1.9 позволяет удаленным злоумышленникам отправлять уведомления на рабочий стол, записывать аудио пользователя и другие неуказанные...
wpair-app
WPair CVE-2025-36911일명 WhisperPair 취약점 스캐너 및 연구 도구 기능 • 설치 • 사용법 • 작동 원리 • 취약점 • 크레딧 면책 조항Disclaimer 이 애플리케이션은 @ZalexDev 님이 개인 자격으로 제작한 독립적인 구현체입니다. 원저자인 KU Leuven 연구진은 이 취약점을 발견하고 공개했지만, 어떤 코드도 공개하지 않았으며 본 프로젝트와 아무런 관련이 없습니다. 크레딧에 그들을 포함한 것은 오직 연구 기여를 인정하기 위한 목적뿐입니다. 개요 WPair 는 Google Fast Pair...
Astra Linux – Vulnerability in Firefox
When a user has already allowed a website to access the microphone and camera, disabling camera sharing does not completely prevent the website from re-enabling them without an additional prompt. This is only possible if the website continues to record with the microphone until the camera is...
CVE-2026-12060
Heptabase developed by Hepta Platforms has a Exposed Dangerous Method or Function vulnerability, allowing unauthenticated remote attackers to leverage social engineering techniques to trick a victim into opening or loading a malicious webpage within the Heptabase application, thereby gaining...
CVE-2026-12060 Hepta Platforms｜Heptabase - Exposed Dangerous
Heptabase developed by Hepta Platforms has a Exposed Dangerous Method or Function vulnerability, allowing unauthenticated remote attackers to leverage social engineering techniques to trick a victim into opening or loading a malicious webpage within the Heptabase application, thereby gaining...
EUVD-2026-36390
Heptabase developed by Hepta Platforms has a Exposed Dangerous Method or Function vulnerability, allowing unauthenticated remote attackers to leverage social engineering techniques to trick a victim into opening or loading a malicious webpage within the Heptabase application, thereby gaining...
CVE-2026-12060 Hepta Platforms｜Heptabase - Exposed Dangerous
Heptabase developed by Hepta Platforms has a Exposed Dangerous Method or Function vulnerability, allowing unauthenticated remote attackers to leverage social engineering techniques to trick a victim into opening or loading a malicious webpage within the Heptabase application, thereby gaining...
CVE-2026-12060
CVE-2026-12060 concerns Heptabase (Hepta Platforms) with an Exposed Dangerous Method or Function vulnerability. The description indicates unauthenticated remote attackers can leverage social engineering to persuade a victim to open or load a malicious webpage inside the Heptabase application, res...
PT-2026-48831
Heptabase developed by Hepta Platforms has a Exposed Dangerous Method or Function vulnerability, allowing unauthenticated remote attackers to leverage social engineering techniques to trick a victim into opening or loading a malicious webpage within the Heptabase application, thereby gaining...
CVE-2026-39309
Trilium Notes is a cross-platform, hierarchical note taking application focused on building large personal knowledge bases. In versions 0.102.1 and prior, the Electron configuration is vulnerable to TCC Bypass via Prompt Spoofing, allowing local attackers to trigger misleading macOS permission...
CVE-2026-39309
Trilium Notes is a cross-platform, hierarchical note taking application focused on building large personal knowledge bases. In versions 0.102.1 and prior, the Electron configuration is vulnerable to TCC Bypass via Prompt Spoofing, allowing local attackers to trigger misleading macOS permission...
CVE-2026-39309 Trilium Notes: macOS TCC Bypass via Prompt Spoofing
Trilium Notes is a cross-platform, hierarchical note taking application focused on building large personal knowledge bases. In versions 0.102.1 and prior, the Electron configuration is vulnerable to TCC Bypass via Prompt Spoofing, allowing local attackers to trigger misleading macOS permission...
Browser Guard gets even better with Access Control
Have you ever been on a website when a pop-up suddenly asked for access to your camera, microphone, location, or notifications? Whether you clicked “allow,” dismissed it, or just wondered why it appeared, those permission requests aren’t always harmless. Some sites can abuse those permissions. Wi...
Exploit for CVE-2024-23700
PoC for CVE-2024-23700, allowing silently obtain permissions to...
DRILLAPP Backdoor Targets Ukraine, Abuses Microsoft Edge Debugging for Stealth Espionage
Ukrainian entities have emerged as the target of a new campaign likely orchestrated by threat actors linked to Russia, according to a report from S2 Grupo's LAB52 threat intelligence team. The campaign, observed in February 2026, has been assessed to share overlaps with a prior campaign mounted b...
Chrome flaw let extensions hijack Gemini’s camera, mic, and file access
Chrome’s Gemini “Live in Chrome” panel Gemini’s embedded, agent-style assistant mode within Chrome had a high‑severity vulnerability tracked as CVE‑2026‑0628. The flaw let a low‑privilege extension inject code into the Gemini side panel and inherit its powerful capabilities, including local file...