AntiVE-BehaviorWatch

AntiVE-BehaviorWatch Verificación de comportamiento humano impulsada por IA integrada para investigación en ciberseguridad. ¿Qué es AntiVE-BehaviorWatch? AntiVE-BehaviorWatch es un proyecto de investigación en ciberseguridad basado en Windows que explora un nuevo enfoque para el control de...

RemoteMouse-3.008-RCE

CVE-2021-35448 - Exploit de Remote Mouse Descripción Este exploit apunta a la vulnerabilidad CVE-2021-35448 en la aplicación Remote Mouse anteriormente WiFi Mouse. POC CVE-2021-35448.webm Uso Sintaxis básica python3 CVE-2021-35448.py -t OPTIONS Opciones -t, --target: Dirección IP del objetivo...

PyLoggy

PyLoggy PyLoggy es un keylogger de Python simple y potente capaz de registrar pulsaciones de teclado, clics de ratón, tomar capturas de pantalla y más. La herramienta enviará los registros a tu correo electrónico cada minuto puedes cambiar esto. Instalación 1. Clónalo: git clone...

Peyara

Exploit Title: Peyara Remote Mouse v1.0.1 - Remote Code Execution RCE Date: 2025-05-30 Exploit Author: tmrswrr Software Link:https://peyara-remote-mouse.vercel.app/ Platform: Windows Version: v1.0.1 Tested on: Windows 10 Vulnerability Description Peyara Remote Mouse v1.0.1 contains an...

Peyara-FileUpload

Exploit Title: Peyara Remote Mouse v1.0.1 Unauthenticated Arbitrary File Upload Date: 2025-01-06 Exploit Author: tmrswrr Software Link: https://peyara-remote-mouse.vercel.app/ Platform: Windows Version: v1.0.1 Tested on: Windows 10 USAGE : python3 combinedscript.py Create Malicious LNK File...

MouseServer-1.7.8.5-RCE

WiFi Mouse Server 1.7.8.5 - RCE An optimized Python 3 Proof-of-Concept PoC exploit for WiFi Mouse Server v1.7.8.5. This script leverages an inherent protocol vulnerability to achieve Remote Code Execution RCE via automated keystroke injection. This version has been explicitly modified and tuned f...

CVE-2026-78071

Stored XSS via Location Title in DPCalendar Free DPCalendar Free ≤ 10.11.2 — Author-Role User Bypasses Content Review to Inject Persistent XSS via Location Title, Triggered on Hover by Any Visitor -orange SUMMARY The $location-title field is rendered without htmlspecialchars in...

nmap-vulnerability-scan-scripts

Aviso de vulnerabilidad de Synopsys CyRC: https://www.synopsys.com/blogs/software-security/cyrc-advisory-remote-code-execution-vulnerabilities-mouse-keyboard-apps.html CVE-2022-45477, CVE-2022-45479, CVE-2022-45482, CVE-2022-45481...

CVE-2023-31902

CVE-2023-31902 — Mobile Mouse 3.6.0.4 Remote Code Execution Summary: Mobile Mouse is a Windows application that turns your phone into a mouse/keyboard over the network. It listens on port 9099 TCP and 35913 WebSocket with no authentication by default. The vulnerability allows an unauthenticated...

Rocky Linux 8 [CIQ] Security Update: thunderbird / thunderbird-debuginfo / thunderbird-debugsource Multiple Vulnerabilities (crlsa-2022_5774)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20225774 advisory. Mozilla: Memory safety bugs fixed in Firefox 103 and 102.1 CVE-2022-2505 Mozilla: Directory indexes for bundled resources reflected URL parameters...

Rocky Linux 8 [CIQ] Security Update: firefox / firefox-debuginfo / firefox-debugsource Multiple Vulnerabilities (crlsa-2022_5777)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20225777 advisory. Mozilla: Memory safety bugs fixed in Firefox 103 and 102.1 CVE-2022-2505 Mozilla: Directory indexes for bundled resources reflected URL parameters...

mouseserver-exploit

Mobile Mouse 3.6.0.4 RCE - Fix A corrected version of the Mobile Mouse 3.6.0.4 remote code execution exploit published as EDB-51010. Vulnerability CVE: CVE-2023-31902 Affected version: Mobile Mouse 3.6.0.4 Default port: TCP/9099 What Was Fixed The original exploit successfully downloads the paylo...

Astra Linux – Vulnerability in xorg-server

In the X.Org X Server versions 20.11 through 21.1.16, when a client application uses easystroke for mouse gestures, the main thread modifies various data structures used by the input thread without acquiring a lock, which is known as a race condition. Specifically, the AttachDevice function in...

Astra Linux – Vulnerability in Linux

In the Linux kernel, the following vulnerability has been resolved: HID: magicmouse: fix NULL dereferencing on disconnection Commit 9d7b18668956 “HID: magicmouse: add support for Apple Magic Trackpad 2” added a sanity check for an Apple trackpad. If the check fails, it returns success instead of...

Astra Linux – Vulnerability in Firefox and Thunderbird

A malicious website could have used a combination of the fullscreen mode and the requestPointerLock function to cause the user’s mouse to be repositioned unexpectedly. This could lead to confusion among users and, inadvertently, the granting of permissions that the user did not intend to grant...

CVE-2026-80782

CVE-2026-80782 is a use-after-free vulnerability in the Linux kernel's HID magicmouse driver (used by Apple USB Magic Mouse 2 / Magic Trackpad 2). The root cause is that magicmouse_input_mapping() caches the input_dev pointer in msc->input during report descriptor parsing. On the hidinput_conn...

The vulnerability of the ibmasm_handle_mouseinterrupt() function in the drivers/misc/ibmasm/remote.c file of the Linux operating system’s service processor IBM RSA driver module allows a attacker to disclose protected information or cause service failures.

The vulnerability of the ibmasmhandlemouseinterrupt function in the drivers/misc/ibmasm/remote.c file of the Linux operating system’s service processor driver module IBM RSA is related to an improper check of the specified index, position, or offset in the input data. Exploiting this vulnerabilit...

CVE-2026-38465

A Stored XSS vulnerability in the donor avatar mouse-over text feature in GazellePW GazellePosterWall commit 86c4bedf727691b5a97af42a4864869d18446449 allows remote authenticated users to inject arbitrary JavaScript via the avatarmouseovertext parameter, which is stored and later rendered in avata...

CVE-2026-38465

A Stored XSS vulnerability exists in the donor avatar mouse-over text feature of GazellePW (GazellePosterWall) , specifically in commit 86c4bedf727691b5a97af42a4864869d18446449 . Remote authenticated users can inject arbitrary JavaScript through the avatar_mouse_over_text parameter. This maliciou...

CVE-2026-38465

A Stored XSS vulnerability in the donor avatar mouse-over text feature in GazellePW GazellePosterWall commit 86c4bedf727691b5a97af42a4864869d18446449 allows remote authenticated users to inject arbitrary JavaScript via the avatarmouseovertext parameter, which is stored and later rendered in avata...