Nanobrok

Nanobrok Web Service Web Service write in Python for control and protect your android device remotely. The official app can be found on the PlayStore: NanobrokPro Nanobrok Community Overview Nanobrok-Server is powerful opensource webservice for control and protect your android device, written in...

RATel

RATel Please do not upload to virustotal ! To prevent RATel from being detected by antivirus, please do not upload the payload to TOTAL VIRUS. Each month I will test myself if the payload gets detected by antivirus. So you’ll have a photo every month to prove RAtel discretion. Description RAT-el ...

CVE-2024-57366

CVE-2024-57366 Exploit A robust exploit for CVE-2024-57366 that allows remote code execution on vulnerable routers through MAC address validation bypass and command injection. This is a post-authorization exploit that requires the router "Remote Control" feature to be on, and the administrative...

blueXploit

blueXploit blueXploit video blueXploit is my own proof-of-concept that reproduces CVE-2023-45866 , the Bluetooth keystroke-injection vulnerability discovered by Marc Newlin. It abuses a flaw in the Bluetooth protocol to inject keystrokes into a target device without pairing , opening the door to...

AndroRAT

Disclaimer : This software is meant for educational purposes only. I'm not responsible for any malicious use of the app. AndroRAT AndroRAT is a tool designed to give the control of the android system remotely and retrieve informations from it. Androrat is a client/server application developed in...

CVE-2026-92372

An out-of-bounds write vulnerability in the screen-image decoder of TeamViewer Full Client for Linux and macOS prior to version 15.83 allows a remote attacker to execute arbitrary code by supplying crafted screen-image data during a remote-control session. The vulnerability can also be exploited ...

CVE-2026-111585

An integer overflow in the remote-control screen processing component of TeamViewer clients Full Client, Portable and Remote Control App prior to version 15.83 may allow a malicious remote host to cause a denial of service or, depending on the platform, potentially execute arbitrary code with the...

CVE-2026-111585 Integer Overflow in TeamViewer Remote Control Screen Decompression Leading to Heap-Based Buffer Overflow

An integer overflow in the remote-control screen processing component of TeamViewer clients Full Client, Portable and Remote Control App prior to version 15.83 may allow a malicious remote host to cause a denial of service or, depending on the platform, potentially execute arbitrary code with the...

EUVD-2026-111081

An integer overflow in the remote-control screen processing component of TeamViewer clients Full Client, Portable and Remote Control App prior to version 15.83 may allow a malicious remote host to cause a denial of service or, depending on the platform, potentially execute arbitrary code with the...

CVE-2026-111585

TeamViewer clients (Full Client, Portable, and Remote Control App) prior to version 15.83 are vulnerable to an integer overflow within the remote-control screen processing component. This flaw can lead to a heap-based buffer overflow , potentially allowing a malicious remote host to cause a denia...

CVE-2026-92372 Out-of-bounds Write in TeamViewer Full Client for Linux and macOS Allows Remote Code Execution

An out-of-bounds write vulnerability in the screen-image decoder of TeamViewer Full Client for Linux and macOS prior to version 15.83 allows a remote attacker to execute arbitrary code by supplying crafted screen-image data during a remote-control session. The vulnerability can also be exploited ...

EUVD-2026-111073

An out-of-bounds write vulnerability in the screen-image decoder of TeamViewer Full Client for Linux and macOS prior to version 15.83 allows a remote attacker to execute arbitrary code by supplying crafted screen-image data during a remote-control session. The vulnerability can also be exploited ...

0net

0net: Simple Windows Remote Control Backdoor Introduction: 0net is a simple Windows remote control backdoor program. The client is written in C++ and compiled with VC++6.0. The server is written in Python and is cross-platform. The project is currently under development... Project details:...

CVE-2022-4096

CVE 2022 -4096 Amine TITROFINE | January 21, 2023 This experiment is destinated to demonstrate how the DNS rebinding attack works on an emulated IoT. In the setup, we have a simulated IoT device, which can be controlled through a web interface this is typical for many IoT devices. Many IoT device...

PT-2026-126621

A newly disclosed vulnerability, CVE-2026-92372 CVSS 8.8 – High, affects TeamViewer clients running on Linux and macOS. The flaw exists in TeamViewer's screen-image decoder. An attacker controlling a remote computer can send specially crafted screen data during a session, triggering an...

PT-2026-126620

An integer overflow in the remote-control screen processing component of TeamViewer clients Full Client, Portable and Remote Control App prior to version 15.83 may allow a malicious remote host to cause a denial of service or, depending on the platform, potentially execute arbitrary code with the...

SocialFishMobile

SocialFish Mobile This app is an open-source project to remote control SocialFish, it does not work independently. How to build Prepare your Flutter environment Go to https://flutter.dev/docs/get-started/install After configured go ahead Clone this repository $ git clone...

reinschauer

Reinschauer A PoC to remotely control Windows machines over Websockets. Check out my blog for a writeup. Can be executed as Go exe, .NET/C exe and in-memory using BOF.NET and Cobaltstrike. Traffic can be tunneled via an interactive Beacon connection. Other than most HVNC implementations,...

CVE-2026-107858

Missing Origin Validation in WebSockets CWE-1385 and Permissive Cross-domain Policy with Untrusted Domains CWE-942 in the development web server ADK Web in Google Agent Development Kit ADK for Java com.google.adk:google-adk-dev versions 0.1.0 before 1.13.0 and com.google.adk:google-adk-maven-plug...

CVE-2026-107858

Missing Origin Validation in WebSockets CWE-1385 and Permissive Cross-domain Policy with Untrusted Domains CWE-942 in the development web server ADK Web in Google Agent Development Kit ADK for Java com.google.adk:google-adk-dev versions 0.1.0 before 1.13.0 and com.google.adk:google-adk-maven-plug...