Peyara

漏洞标题：Peyara Remote Mouse v1.0.1 - 远程代码执行（RCE） 日期：2025-05-30 漏洞作者：tmrswrr 软件链接：https://peyara-remote-mouse.vercel.app/ 平台：Windows 版本：v1.0.1 测试环境：Windows 10 漏洞描述 Peyara Remote Mouse v1.0.1 的 WebSocket 命令接口（端口 1313）存在一个未经验证的远程代码执行漏洞。该应用程序未能验证或清理通过 WebSocket...

AntiVE-BehaviorWatch

AntiVE-BehaviorWatch 基于嵌入式人工智能的网络安全研究中人类行为验证。 什么是 AntiVE-BehaviorWatch？ AntiVE-BehaviorWatch 是一个基于 Windows 的网络安全研究项目，探索一种使用嵌入式人工智能 进行执行控制的新方法。 该项目不依赖传统的反分析技术（如虚拟机检测、沙箱检测、调试器检查或硬件指纹识别），而是使用嵌入式 GRU（门控循环单元）神经网络 来判断是否有真实人类 正在与系统交互。...

Peyara-FileUpload

漏洞利用标题：Peyara Remote Mouse v1.0.1 未经认证的任意文件上传 日期：2025-01-06 漏洞利用作者：tmrswrr 软件链接：https://peyara-remote-mouse.vercel.app/ 平台：Windows 版本：v1.0.1 测试环境：Windows 10 root@kitploit: 用法 : python3 combinedscript.py 创建恶意 LNK 文件 evil.lnk root@kitploit: $WshShell = New-Object -ComObject WScript.Shell $Shortcut ...

PyLoggy

PyLoggy PyLoggy 是一款简单而强大的 Python 键盘记录器，能够记录按键、鼠标点击、截屏等等！该工具会每隔一分钟将日志发送到你的邮箱（你可以更改此设置）。 安装 1. 克隆仓库： git clone https://github.com/D4Vinci/PyLoggy.git 2. 运行它： python PyLoggy.py 你也可以使用 PyInstaller 或任何类似工具将 PyLoggy 转换为 EXE 可执行文件。...

mouseserver-exploit

Mobile Mouse 3.6.0.4 RCE - 修复 这是已发布为 EDB-51010 的 Mobile Mouse 3.6.0.4 远程代码执行漏洞利用程序的修正版本。 漏洞 CVE： CVE-2023-31902 受影响版本： Mobile Mouse 3.6.0.4 默认端口： TCP/9099 修复内容 原始漏洞利用程序虽然可以成功下载有效载荷，但由于两个阶段使用同一条 TCP 连接，可能无法执行该有效载荷。 此版本： 通过第一个会话下载有效载荷 等待下载完成 建立一条新连接 重复 Mobile Mouse 握手 执行下载的有效载荷 它还使用了 sendall、正确转义的...

nmap-vulnerability-scan-scripts

Synopsys CyRC 漏洞公告：https://www.synopsys.com/blogs/software-security/cyrc-advisory-remote-code-execution-vulnerabilities-mouse-keyboard-apps.html CVE-2022-45477, CVE-2022-45479, CVE-2022-45482, CVE-2022-45481...

CVE-2023-31902

CVE-2023-31902 — Mobile Mouse 3.6.0.4 远程代码执行 摘要： Mobile Mouse 是一款 Windows 应用程序，可通过网络将手机变成鼠标/键盘。它默认在端口 9099 TCP 和 35913 WebSocket 上监听，且无需认证 。 该漏洞允许同一网络上的未认证攻击者发送精心构造的协议消息，在 Windows 主机上执行任意命令——本质上是一个预认证的远程代码执行漏洞，仅需网络访问该端口即可。 两个攻击向量： 向量| 端口| 脚本 ---|---|--- TCP 套接字（原始版）| 9099| 51010.py /...

RemoteMouse-3.008-RCE

CVE-2021-35448 - Remote Mouse 利用工具 描述 此利用工具针对 Remote Mouse（原名 WiFi Mouse）应用程序中的 CVE-2021-35448 漏洞。 POC CVE-2021-35448.webm 使用方法 基本语法 root@kitploit: python3 CVE-2021-35448.py -t OPTIONS 选项 -t, --target：目标 IP 地址（必填） -p, --payload：自定义执行的命令 -r, --reverse：反向 Shell，格式为 IP:PORT -l, --http：本地 HTTP 服务器，格式...

MouseServer-1.7.8.5-RCE

WiFi Mouse Server 1.7.8.5 - RCE Un exploit Proof-of-Concept PoC ottimizzato in Python 3 per WiFi Mouse Server v1.7.8.5. Questo script sfrutta una vulnerabilità intrinseca del protocollo per ottenere l'esecuzione remota di codice RCE tramite iniezione automatizzata di tasti. Questa versione è stat...

CVE-2026-38465

A Stored XSS vulnerability in the donor avatar mouse-over text feature in GazellePW GazellePosterWall commit 86c4bedf727691b5a97af42a4864869d18446449 allows remote authenticated users to inject arbitrary JavaScript via the avatarmouseovertext parameter, which is stored and later rendered in avata...

CVE-2026-38465

CVE-2026-38465 is a Stored XSS in GazellePW (GazellePosterWall) , a PHP web application, specifically in the donor avatar mouse-over text feature. Remote authenticated users can inject arbitrary JavaScript via the avatar_mouse_over_text parameter, which is persisted and later rendered unsanitized...

Astra Linux – Vulnerability in xorg-server

In the X.Org X Server versions 20.11 through 21.1.16, when a client application uses easystroke for mouse gestures, the main thread modifies various data structures used by the input thread without acquiring a lock, which is known as a race condition. Specifically, the AttachDevice function in...

ANT-2026-3SEPW083 · ncurses · Stack-buffer-overflow

stack-buffer-overflow high Severity Claude high · Security research firm high · Maintainer - Discovered by an unreleased Anthropic model REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-3SEPW083: Stack buffer overflow in SGR mouse...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: x86/vmware: Fixed hypercall clobbering issues Fedora QA reported the following panic: BUG: Unable to handle a page fault for address: 0000000040003e54 PF: Supervisor write access in kernel mode PF: Errorcode0x0002 – Not-presen...

Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: HID: magicmouse: Do not cause a crash when the msc-input field is missing. Fake USB devices can send their own report descriptors, for which the inputmapping hook is not called. In this case, msc-input remains NULL, leading to a...

MAL-2026-13618 Malicious code in w-screenctl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b2f241eacc2eaaaac28d2b9d76aeb67042a109869b28e45a88648bf937f856f When WScreenctl is invoked via the bundled g.mjs entry or the documented systemd/Task Scheduler service units, the package starts a Hapi HTTP server...

Weekly Metasploit Update: Modules for SMB-to-Meterpreter, Peyara Remote Mouse RCE exploit, and more

It's Time to Upgrade Your SMB Session This week, Metasploit contributor Dean Welch has added an SMB to Meterpreter session upgrade module. It uses PsExec to facilitate the upgrade. Users can load the module with use windows/manage/smbtometerpreter and specify the session number they wish to...

The vulnerability of the alps_disconnect() function in the drivers/input/mouse/alps.c module of the Linux kernel mouse driver allows a hacker to cause a service failure.

The vulnerability of the alpsdisconnect function in the drivers/input/mouse/alps.c module of the Linux kernel operating system is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow a attacker to cause a service failure...

misc: ibmasm: fix OOB MMIO read in ibmasm_handle_mouse_interrupt()

...

CVE-2026-46022

In the Linux kernel, the following vulnerability has been resolved: misc: ibmasm: fix OOB MMIO read in ibmasmhandlemouseinterrupt ibmasmhandlemouseinterrupt performs an out-of-bounds MMIO read when the queue reader or writer index from hardware exceeds REMOTEQUEUESIZE 60. A compromised service...