AntiVE-BehaviorWatch

AntiVE-BehaviorWatch 基于嵌入式人工智能的网络安全研究中人类行为验证。 什么是 AntiVE-BehaviorWatch？ AntiVE-BehaviorWatch 是一个基于 Windows 的网络安全研究项目，探索一种使用嵌入式人工智能 进行执行控制的新方法。 该项目不依赖传统的反分析技术（如虚拟机检测、沙箱检测、调试器检查或硬件指纹识别），而是使用嵌入式 GRU（门控循环单元）神经网络 来判断是否有真实人类 正在与系统交互。...

CVE-2026-78071

XSS Almacenado mediante el Título de Ubicación en DPCalendar Free DPCalendar Free ≤ 10.11.2 — Un Usuario con Rol de Autor Omite la Revisión de Contenido para Inyectar XSS Persistente mediante el Título de Ubicación, Activado al Pasar el Cursor por Cualquier Visitante -orange RESUMEN El campo...

PyLoggy

PyLoggy PyLoggy es un keylogger de Python simple y potente capaz de registrar pulsaciones de teclado, clics de ratón, tomar capturas de pantalla y más. La herramienta enviará los registros a tu correo electrónico cada minuto puedes cambiar esto. Instalación 1. Clónalo: git clone...

nmap-vulnerability-scan-scripts

Aviso de vulnerabilidad de Synopsys CyRC: https://www.synopsys.com/blogs/software-security/cyrc-advisory-remote-code-execution-vulnerabilities-mouse-keyboard-apps.html CVE-2022-45477, CVE-2022-45479, CVE-2022-45482, CVE-2022-45481...

CVE-2023-31902

CVE-2023-31902 — Mobile Mouse 3.6.0.4 远程代码执行 摘要： Mobile Mouse 是一款 Windows 应用程序，可通过网络将手机变成鼠标/键盘。它默认在端口 9099 TCP 和 35913 WebSocket 上监听，且无需认证 。 该漏洞允许同一网络上的未认证攻击者发送精心构造的协议消息，在 Windows 主机上执行任意命令——本质上是一个预认证的远程代码执行漏洞，仅需网络访问该端口即可。 两个攻击向量： 向量| 端口| 脚本 ---|---|--- TCP 套接字（原始版）| 9099| 51010.py /...

Peyara-FileUpload

Exploit Title: Peyara Remote Mouse v1.0.1 Unauthenticated Arbitrary File Upload Date: 2025-01-06 Exploit Author: tmrswrr Software Link: https://peyara-remote-mouse.vercel.app/ Platform: Windows Version: v1.0.1 Tested on: Windows 10 root@kitploit: USAGE : python3 combinedscript.py...

Peyara

Título del Exploit: Peyara Remote Mouse v1.0.1 - Ejecución Remota de Código RCE Fecha: 2025-05-30 Autor del Exploit: tmrswrr Enlace del Software:https://peyara-remote-mouse.vercel.app/ Plataforma: Windows Versión: v1.0.1...

mouseserver-exploit

Mobile Mouse 3.6.0.4 RCE - Corrección Una versión corregida del exploit de ejecución remota de código de Mobile Mouse 3.6.0.4 publicado como EDB-51010. Vulnerabilidad CVE: CVE-2023-31902 Versión afectada: Mobile Mouse 3.6.0.4 Puerto predeterminado: TCP/9099 Qué se corrigió El exploit original...

RemoteMouse-3.008-RCE

CVE-2021-35448 - Remote Mouse Exploit Description This exploit targets the CVE-2021-35448 vulnerability in the Remote Mouse application formerly WiFi Mouse. POC CVE-2021-35448.webm Usage Basic Syntax root@kitploit: python3 CVE-2021-35448.py -t OPTIONS Options -t, --target: Target IP address...

MouseServer-1.7.8.5-RCE

WiFi Mouse Server 1.7.8.5 - RCE Un exploit optimizado de Prueba de Concepto PoC en Python 3 para WiFi Mouse Server v1.7.8.5. Este script aprovecha una vulnerabilidad inherente del protocolo para lograr la Ejecución Remota de Código RCE mediante la inyección automatizada de pulsaciones de teclado...

Astra Linux – Vulnerability in Firefox and Thunderbird

A malicious website could have used a combination of the fullscreen mode and the requestPointerLock function to cause the user’s mouse to be repositioned unexpectedly. This could lead to confusion among users and, inadvertently, the granting of permissions that the user did not intend to grant...

Astra Linux – Vulnerability in xorg-server

In the X.Org X Server versions 20.11 through 21.1.16, when a client application uses easystroke for mouse gestures, the main thread modifies various data structures used by the input thread without acquiring a lock, which is known as a race condition. Specifically, the AttachDevice function in...

CVE-2026-80782

CVE-2026-80782 is a use-after-free vulnerability in the Linux kernel's HID magicmouse driver (used by Apple USB Magic Mouse 2 / Magic Trackpad 2). The root cause is that magicmouse_input_mapping() caches the input_dev pointer in msc->input during report descriptor parsing. On the hidinput_conn...

The vulnerability of the ibmasm_handle_mouseinterrupt() function in the drivers/misc/ibmasm/remote.c file of the Linux operating system’s service processor IBM RSA driver module allows a attacker to disclose protected information or cause service failures.

The vulnerability of the ibmasmhandlemouseinterrupt function in the drivers/misc/ibmasm/remote.c file of the Linux operating system’s service processor driver module IBM RSA is related to an improper check of the specified index, position, or offset in the input data. Exploiting this vulnerabilit...

CVE-2026-38465

A Stored XSS vulnerability in the donor avatar mouse-over text feature in GazellePW GazellePosterWall commit 86c4bedf727691b5a97af42a4864869d18446449 allows remote authenticated users to inject arbitrary JavaScript via the avatarmouseovertext parameter, which is stored and later rendered in avata...

CVE-2026-38465

The software GazellePW (GazellePosterWall) , specifically commit 86c4bedf727691b5a97af42a4864869d18446449 , contains a Stored XSS vulnerability within the donor avatar mouse-over text feature. Remote authenticated users can inject arbitrary JavaScript by manipulating the avatar_mouse_over_text pa...

CVE-2026-38465

A Stored XSS vulnerability in the donor avatar mouse-over text feature in GazellePW GazellePosterWall commit 86c4bedf727691b5a97af42a4864869d18446449 allows remote authenticated users to inject arbitrary JavaScript via the avatarmouseovertext parameter, which is stored and later rendered in avata...

Astra Linux – Vulnerability in Linux

In the Linux kernel, the following vulnerability has been resolved: HID: magicmouse: fix NULL dereferencing on disconnection Commit 9d7b18668956 “HID: magicmouse: add support for Apple Magic Trackpad 2” added a sanity check for an Apple trackpad. If the check fails, it returns success instead of...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: HID: magicmouse: Do not cause a crash when the msc-input field is missing. Fake USB devices can send their own report descriptors, for which the inputmapping hook is not called. In this case, msc-input remains NULL, leading to a...

ANT-2026-3SEPW083 · ncurses · Stack-buffer-overflow

stack-buffer-overflow high Severity Claude high · Security research firm high · Maintainer - Discovered by an unreleased Anthropic model REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-3SEPW083: Stack buffer overflow in SGR mouse...