AntiVE-BehaviorWatch

AntiVE-BehaviorWatch Embedded AI-powered human behavior verification for cybersecurity research. What is AntiVE-BehaviorWatch? AntiVE-BehaviorWatch is a Windows-based cybersecurity research project that explores a new approach to execution control using embedded artificial intelligence. Instead o...

Peyara-FileUpload

Exploit Title: Peyara Remote Mouse v1.0.1 Unauthenticated Arbitrary File Upload Date: 2025-01-06 Exploit Author: tmrswrr Software Link: https://peyara-remote-mouse.vercel.app/ Platform: Windows Version: v1.0.1 Tested on: Windows 10 USAGE : python3 combinedscript.py Create Malicious LNK File...

RemoteMouse-3.008-RCE

CVE-2021-35448 - Remote Mouse Exploit Description This exploit targets the CVE-2021-35448 vulnerability in the Remote Mouse application formerly WiFi Mouse. POC CVE-2021-35448.webm Usage Basic Syntax python3 CVE-2021-35448.py -t OPTIONS Options -t, --target: Target IP address required -p,...

CVE-2026-78071

Stored XSS via Location Title in DPCalendar Free DPCalendar Free ≤ 10.11.2 — Author-Role User Bypasses Content Review to Inject Persistent XSS via Location Title, Triggered on Hover by Any Visitor -orange SUMMARY The $location-title field is rendered without htmlspecialchars in...

CVE-2023-31902

CVE-2023-31902 — Mobile Mouse 3.6.0.4 Remote Code Execution Summary: Mobile Mouse is a Windows application that turns your phone into a mouse/keyboard over the network. It listens on port 9099 TCP and 35913 WebSocket with no authentication by default. The vulnerability allows an unauthenticated...

PyLoggy

PyLoggy PyLoggy is simple and powerful Python keylogger that is able to log keystrokes, log mouse clicks, take screenshots and more! The tool will send the logs to your email every minuteyou can change this. Installation 1. Clone it: git clone https://github.com/D4Vinci/PyLoggy.git 2. Run it:...

lithium-kernel

██╗ ██╗████████╗██╗ ██╗██╗██╗ ██╗███╗ ███╗ ██║ ██║╚══██╔══╝██║ ██║██║██║ ██║████╗ ████║ ██║ ██║ ██║ ███████║██║██║ ██║██╔████╔██║ ██║ ██║ ██║ ██╔══██║██║██║ ██║██║╚██╔╝██║ ███████╗██║ ██║ ██║ ██║██║╚██████╔╝██║ ╚═╝ ██║ ╚══════╝╚═╝ ╚═╝ ╚═╝ ╚═╝╚═╝ ╚═════╝ ╚═╝ ╚═╝ Windows kernel-mode driver framewor...

nmap-vulnerability-scan-scripts

Synopsys CyRC Vulnerability Advisory: https://www.synopsys.com/blogs/software-security/cyrc-advisory-remote-code-execution-vulnerabilities-mouse-keyboard-apps.html CVE-2022-45477, CVE-2022-45479, CVE-2022-45482, CVE-2022-45481...

MouseServer-1.7.8.5-RCE

WiFi Mouse Server 1.7.8.5 - RCE An optimized Python 3 Proof-of-Concept PoC exploit for WiFi Mouse Server v1.7.8.5. This script leverages an inherent protocol vulnerability to achieve Remote Code Execution RCE via automated keystroke injection. This version has been explicitly modified and tuned f...

Peyara

Exploit Title: Peyara Remote Mouse v1.0.1 - Remote Code Execution RCE Date: 2025-05-30 Exploit Author: tmrswrr Software Link:https://peyara-remote-mouse.vercel.app/ Platform: Windows Version: v1.0.1 Tested on: Windows 10 Vulnerability Description Peyara Remote Mouse v1.0.1 contains an...

mouseserver-exploit

Mobile Mouse 3.6.0.4 RCE - Fix A corrected version of the Mobile Mouse 3.6.0.4 remote code execution exploit published as EDB-51010. Vulnerability CVE: CVE-2023-31902 Affected version: Mobile Mouse 3.6.0.4 Default port: TCP/9099 What Was Fixed The original exploit successfully downloads the paylo...

CLEANSTART-2024-MG22285 If a custom mouse cursor is specified in CSS, under certain circumstances the cursor could have been drawn over the browser UI, resulting in potential user confusion or spoofing attacks

Security vulnerability affects the firefox-esr package. If a custom mouse cursor is specified in CSS, under certain circumstances the cursor could have been drawn over the browser UI, resulting in potential user confusion or spoofing attacks...

CLEANSTART-2024-IM54605 When combining CSS properties for overflow and transform, the mouse cursor could interact with different coordinates than displayed

CVE-2022-36319 affects multiple packages. When combining CSS properties for overflow and transform, the mouse cursor could interact with different coordinates than displayed. See references for individual vulnerability details...

SUSE CVE-2026-116679

Neko is a a self-hosted virtual browser that runs in Docker and uses WebRTC. From version 3.0.0 until 3.1.5, Neko deployments with legacy mode and session.implicithosting enabled incorrectly authorize legacy WebRTC data-channel input because LegacyIsHost evaluates host status incorrectly. An...

GHSA-5CP7-FP4J-WWCV Neko: Authorization bypass in legacy WebRTC input handling

Impact When legacy mode is enabled and session.implicithosting is enabled, the legacy WebRTC data channel incorrectly authorizes input events due to a logic error in LegacyIsHost. As a result, an authenticated room member may be able to send mouse and keyboard input through the legacy WebRTC...

Neko: Authorization bypass in legacy WebRTC input handling

Impact When legacy mode is enabled and session.implicithosting is enabled, the legacy WebRTC data channel incorrectly authorizes input events due to a logic error in LegacyIsHost. As a result, an authenticated room member may be able to send mouse and keyboard input through the legacy WebRTC...

CVE-2026-116679

Neko is a a self-hosted virtual browser that runs in Docker and uses WebRTC. From version 3.0.0 until 3.1.5, Neko deployments with legacy mode and session.implicithosting enabled incorrectly authorize legacy WebRTC data-channel input because LegacyIsHost evaluates host status incorrectly. An...

EUVD-2026-111245

Neko is a a self-hosted virtual browser that runs in Docker and uses WebRTC. From version 3.0.0 until 3.1.5, Neko deployments with legacy mode and session.implicithosting enabled incorrectly authorize legacy WebRTC data-channel input because LegacyIsHost evaluates host status incorrectly. An...

CVE-2026-116679

Neko is a a self-hosted virtual browser that runs in Docker and uses WebRTC. From version 3.0.0 until 3.1.5, Neko deployments with legacy mode and session.implicithosting enabled incorrectly authorize legacy WebRTC data-channel input because LegacyIsHost evaluates host status incorrectly. An...

PT-2026-127181

Neko is a a self-hosted virtual browser that runs in Docker and uses WebRTC. From version 3.0.0 until 3.1.5, Neko deployments with legacy mode and session.implicit hosting enabled incorrectly authorize legacy WebRTC data-channel input because LegacyIsHost evaluates host status incorrectly. An...