244 matches found
android-c-sharp-rat-server
Android C R.A.T Server Este es un plugin construido para el C R.A.T Server con el sistema de plugins. 1. Para instalar este plugin, coloca el archivo AndroidExtension.dll de AndroidExtension/bin/Debug en /TutServer/bin/Debug/scripts 2. Luego inicia el servidor y selecciona la pestaña Plugins. 3...
CVE-2023-26818
Descargo de responsabilidad Este exploit ha sido creado únicamente con fines de investigación y para el desarrollo de técnicas defensivas efectivas. No está destinado a ser utilizado para actividades maliciosas o no autorizadas. El autor y el propietario del script rechazan cualquier...
Storm-Breaker
Una herramienta con capacidades atractivas. Características: Obtener información del dispositivo sin ningún permiso ! Acceder a la ubicación TELÉFONOS INTELIGENTES Acceder a la cámara web Acceder al micrófono Registro de actualizaciones: Segunda última actualización el 4 de noviembre de 2022. La...
CVE-2023-27035
CVE-2023-27035 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N Tipo de vulnerabilidad: Control de acceso incorrecto Descripción: Un problema descubierto en Obsidian Canvas 1.1.9 permite a atacantes remotos enviar notificaciones de escritorio, grabar audio del usuario y otros impactos no especificado...
wpair-app
WPair Escáner y herramienta de investigación de vulnerabilidades CVE-2025-36911 p. ej., WhisperPair Características • Instalación • Uso • Cómo funciona • Vulnerabilidad • Créditos Descargo de responsabilidad Esta aplicación es una implementación independiente creada por @ZalexDev a título persona...
Astra Linux – Vulnerability in Firefox
When a user has already allowed a website to access the microphone and camera, disabling camera sharing does not completely prevent the website from re-enabling them without an additional prompt. This is only possible if the website continues to record with the microphone until the camera is...
CVE-2026-12060
Heptabase developed by Hepta Platforms has a Exposed Dangerous Method or Function vulnerability, allowing unauthenticated remote attackers to leverage social engineering techniques to trick a victim into opening or loading a malicious webpage within the Heptabase application, thereby gaining...
CVE-2026-12060 Hepta Platforms｜Heptabase - Exposed Dangerous
Heptabase developed by Hepta Platforms has a Exposed Dangerous Method or Function vulnerability, allowing unauthenticated remote attackers to leverage social engineering techniques to trick a victim into opening or loading a malicious webpage within the Heptabase application, thereby gaining...
EUVD-2026-36390
Heptabase developed by Hepta Platforms has a Exposed Dangerous Method or Function vulnerability, allowing unauthenticated remote attackers to leverage social engineering techniques to trick a victim into opening or loading a malicious webpage within the Heptabase application, thereby gaining...
CVE-2026-12060 Hepta Platforms｜Heptabase - Exposed Dangerous
Heptabase developed by Hepta Platforms has a Exposed Dangerous Method or Function vulnerability, allowing unauthenticated remote attackers to leverage social engineering techniques to trick a victim into opening or loading a malicious webpage within the Heptabase application, thereby gaining...
CVE-2026-12060
CVE-2026-12060 concerns Heptabase (Hepta Platforms) with an Exposed Dangerous Method or Function vulnerability. The description indicates unauthenticated remote attackers can leverage social engineering to persuade a victim to open or load a malicious webpage inside the Heptabase application, res...
PT-2026-48831
Name of the Vulnerable Software and Affected Versions Heptabase affected versions not specified Description An exposed dangerous method or function allows unauthenticated remote attackers to use social engineering to trick a victim into loading a malicious webpage within the application. This can...
CVE-2026-39309
Trilium Notes is a cross-platform, hierarchical note taking application focused on building large personal knowledge bases. In versions 0.102.1 and prior, the Electron configuration is vulnerable to TCC Bypass via Prompt Spoofing, allowing local attackers to trigger misleading macOS permission...
CVE-2026-39309
Trilium Notes is a cross-platform, hierarchical note taking application focused on building large personal knowledge bases. In versions 0.102.1 and prior, the Electron configuration is vulnerable to TCC Bypass via Prompt Spoofing, allowing local attackers to trigger misleading macOS permission...
CVE-2026-39309 Trilium Notes: macOS TCC Bypass via Prompt Spoofing
Trilium Notes is a cross-platform, hierarchical note taking application focused on building large personal knowledge bases. In versions 0.102.1 and prior, the Electron configuration is vulnerable to TCC Bypass via Prompt Spoofing, allowing local attackers to trigger misleading macOS permission...
Browser Guard gets even better with Access Control
Have you ever been on a website when a pop-up suddenly asked for access to your camera, microphone, location, or notifications? Whether you clicked “allow,” dismissed it, or just wondered why it appeared, those permission requests aren’t always harmless. Some sites can abuse those permissions. Wi...
Exploit for CVE-2024-23700
PoC for CVE-2024-23700, allowing silently obtain permissions to...
DRILLAPP Backdoor Targets Ukraine, Abuses Microsoft Edge Debugging for Stealth Espionage
Ukrainian entities have emerged as the target of a new campaign likely orchestrated by threat actors linked to Russia, according to a report from S2 Grupo's LAB52 threat intelligence team. The campaign, observed in February 2026, has been assessed to share overlaps with a prior campaign mounted b...
Chrome flaw let extensions hijack Gemini’s camera, mic, and file access
Chrome’s Gemini “Live in Chrome” panel Gemini’s embedded, agent-style assistant mode within Chrome had a high‑severity vulnerability tracked as CVE‑2026‑0628. The flaw let a low‑privilege extension inject code into the Gemini side panel and inherit its powerful capabilities, including local file...