kbd-audio

kbd-audio This is a collection of command-line and GUI tools for capturing and analyzing audio data. Keytap The most interesting tool is called keytap - it can guess pressed keyboard keys only by analyzing the audio captured from the computer's microphone. Check this blog post for more details:...

pmd

PMD - source code analyzer PMD is an extensible multilanguage static code analyzer. It finds common programming flaws like unused variables, empty catch blocks, unnecessary object creation, and so forth. It's mainly concerned with Java and Apex , but supports 16 other languages. It comes with 400...

chiasmodon

Chiasmodon Chiasmodon은 사용자가 다양한 소스에서 정보를 수집하고 도메인, Google Play 애플리케이션, 이메일 주소, IP 주소, 조직, URL 등을 기반으로 대상 검색을 수행할 수 있는 OSINT 도구입니다. 포괄적인 스캔 기능, 사용자 정의 가능한 출력 형식, 향상된 데이터 분석 및 사용자 정의를 위한 추가 옵션을 제공합니다. ✨기능 🌐도메인 : 도메인 이름을 지정하여 해당 도메인과 관련된 정보를 수집하는 대상 검색을 수행합니다. 🎮Google Play 애플리케이션 : 애플리케이션 ID를 제공하여...

billing-hack

결제 해킹 이 코드에 대한 정보는 http://sufficientlysecure.org/index.php/2013/10/29/google-play-billing-hacked/ 에서 확인하세요...

streambox-cve-2026-28618

Zero-click APV, in a player that auto-plays shared clips CVE-2026-28618 in StreamBox — the same OpenAPV decoder class as CVE-2026-0006, turned into a heap write against a session object. This repo is a public, redacted writeup: flags, instance tokens, and the HMAC key are omitted. The APK and...

nextcloud_android

Nextcloud 안드로이드 앱 Codacy Badge Nextcloud를 위한 안드로이드 클라이언트입니다. Nextcloud에서 데이터를 쉽게 작업하세요. 기여하는 방법 Nextcloud에 기여하고 싶으시다면 환영합니다: freenode의 IRC 채널 및 에서 포럼 https://help.nextcloud.com 앱 번역은 Transifex에서 이슈 및 PR 열기 해당 이슈 포함 기여 지침 및 라이선스 GPLv2입니다. 2016년 6월 16일 이후 이 저장소에 대한 모든 기여는 AGPLv3 또는 그 이후 버전에 따라 라이선스...

POC-CVE-2017-8464-OpenCalculator

CVE-2017-8464 / 연구 + PoC 바로가기Shortcut 1개 + 악성 payload가 포함된 .DLL 1개를 생성 = USB에 넣어 피해자에게 전송 = 피해자가 USB를 열면 = Payload가 자동으로 실행됩니다! 근본 원인 1. 먼저 우리는 이 버그가 정확히 어디서 발생하는지 알아야 합니다! 이는 Plug-and-Play플러그 앤 플레이 기능 때문입니다. OS가 장치를 자동으로 감지하고, 리소스를 할당하며, 재부팅 없이 즉시 작동하도록 적절한 드라이버를 로드합니다. USB를 꽂고 Windows Explorer...

AuroraStore

Aurora Store Aurora Store를 사용하면 공식 Google Play 스토어에서 앱을 검색하고 다운로드할 수 있습니다. 앱 설명, 스크린샷, 업데이트, 리뷰를 확인하고 Google Play에서 APK를 기기로 직접 다운로드할 수 있습니다. Aurora Store를 사용하려면 처음 열고 구성할 때 Google Play 계정으로 로그인하세요. 기존 앱 스토어와 달리 Aurora Store는 어떤 앱도 소유, 라이선스 또는 배포하지 않습니다. Aurora Store의 모든 앱, 앱 설명, 스크린샷 및 기타 콘텐츠는...

CVE-2026-101141

A flaw has been found in Eleveo Call Recording Software 9.7.0. Affected is an unknown function of the file /callrec/audio.jsp of the component Play Audio Page. Executing a manipulation of the argument viewRoleId/cfType can lead to cross site scripting. The attack can be launched remotely. The...

EUVD-2026-88446

A flaw has been found in Eleveo Call Recording Software 9.7.0. Affected is an unknown function of the file /callrec/audio.jsp of the component Play Audio Page. Executing a manipulation of the argument viewRoleId/cfType can lead to cross site scripting. The attack can be launched remotely. The...

CVE-2026-101141

A cross-site scripting (XSS) vulnerability exists in Eleveo Call Recording Software 9.7.0 within the Play Audio Page component. The flaw is located in an unknown function of the file /callrec/audio.jsp , where an attacker can remotely manipulate the viewRoleId/cfType argument to execute the attac...

CVE-2026-101141 Eleveo Call Recording Software Play Audio audio.jsp cross site scripting

A flaw has been found in Eleveo Call Recording Software 9.7.0. Affected is an unknown function of the file /callrec/audio.jsp of the component Play Audio Page. Executing a manipulation of the argument viewRoleId/cfType can lead to cross site scripting. The attack can be launched remotely. The...

CVE-2026-101141 Eleveo Call Recording Software Play Audio audio.jsp cross site scripting

A flaw has been found in Eleveo Call Recording Software 9.7.0. Affected is an unknown function of the file /callrec/audio.jsp of the component Play Audio Page. Executing a manipulation of the argument viewRoleId/cfType can lead to cross site scripting. The attack can be launched remotely. The...

CVE-2026-101141: Improper Neutralization of Input During Web Page Generation

A flaw has been found in Eleveo Call Recording Software 9.7.0. Affected is an unknown function of the file /callrec/audio.jsp of the component Play Audio Page. Executing a manipulation of the argument viewRoleId/cfType can lead to cross site scripting. The attack can be launched remotely. The...

PT-2026-102331

Name of the Vulnerable Software and Affected Versions Eleveo Call Recording Software version 9.7.0 Description A flaw in the Play Audio Page component allows remote attackers to perform cross-site scripting XSS, which is a technique used to inject malicious scripts into web pages viewed by other...

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization via the GET /api/station/stationid/file/id/play endpoint. An attacker can access and download media files from stations they do not have permission to view by enumerating sequential IDs and exfiltrating the complet...

CVE-2026-100855

AzuraCast before 0.23.6 contains a missing permission check vulnerability in the GET /api/station/stationid/file/id/play endpoint that allows authenticated users to download media files from any station. Attackers can enumerate media files using sequential IDs and exfiltrate the complete media...

CVE-2026-100855 AzuraCast before 0.23.6 Missing Permission Check via /play

AzuraCast before 0.23.6 contains a missing permission check vulnerability in the GET /api/station/stationid/file/id/play endpoint that allows authenticated users to download media files from any station. Attackers can enumerate media files using sequential IDs and exfiltrate the complete media...

CVE-2026-100855

AzuraCast versions before 0.23.6 are vulnerable to a missing permission check in the GET /api/station/{station_id}/file/{id}/play endpoint. This flaw allows authenticated users to download media files from any station by enumerating sequential IDs. Consequently, an attacker can exfiltrate the com...

CVE-2026-100855 AzuraCast before 0.23.6 Missing Permission Check via /play

AzuraCast before 0.23.6 contains a missing permission check vulnerability in the GET /api/station/stationid/file/id/play endpoint that allows authenticated users to download media files from any station. Attackers can enumerate media files using sequential IDs and exfiltrate the complete media...