CVE-2019-6203-PoC

CVE-2019-6203-PoC Hay un fallo de PEAP en todos los dispositivos Apple que permitiría a un atacante forzar a cualquier dispositivo Apple iOS, macOS o tvOS a asociarse con un punto de acceso malicioso. Este es un PoC para CVE-2019-6203, funciona en iOS 12.2, macOS 10.14.4, probado en Kali Linux...

killosx

killosx 使用 Apple CoreText 漏洞 CVE-2012-3716 并启动一个 AP，影响 wifi 范围内所有易受攻击的 Apple 设备。 安装: 在 killosx 目录中运行 'make install'。现在可以在任何地方使用 'killosx' 运行 killosx。 用法: root@kitploit: killOSX Usage - killosx -i wlan0 Run exploit on wlan0 killosx -h This help...

CVE-2025-24271

CVE-2025-24271 AirPlay 漏洞暴露苹果设备中的敏感信息 [email protected] https://m10.com.mx/cve-2025-24271-vulnerabilidad-en-airplay-expone-informacion-sensible-en-dispositivos-apple/ 苹果已确认以下操作系统存在漏洞： macOS Sequoia 15.4 macOS Sonoma 14.7.5 macOS Ventura 13.7.5 iOS 18.4 iPadOS 17.7.6 和 18.4 tvOS 18.4 visionOS...

CVE-2021-30860

CVE-2021-30860 CVE-2021-30860 FORCEDENTRY es una vulnerabilidad conocida en MacOS, iOS y WatchOS. Permite la ejecución arbitraria de código al enviar a un dispositivo víctima un "PDF manipulado maliciosamente". Esta vulnerabilidad fue corregida por Apple el 13 de septiembre de 2021 con las...

palera1n

palera1n 适用于 A8 至 A11、T2 设备的越狱工具，支持 iOS/iPadOS/tvOS 15.0、bridgeOS 5.0 及更高版本。 --- palera1n 在终端中使用的截图 设备支持 请注意，在 A11（iPhone X、8、8 Plus）上，在越狱状态下你必须禁用锁屏密码 （在 iOS 16 上，你需要重置设备 后才能继续使用 palera1n）。 Apple T2 设备支持（点击展开） 电脑要求 1. 建议使用 USB-A 数据线，USB-C 数据线可能在 palera1n 和进入 DFU 模式时出现问题。 由于 USB-C 数据线具有不同的配件 ID，使用...

kfd

简要免责声明：我无意添加对其他设备和 iOS 版本的偏移量。 kfd kfd，即 kernel file descriptor（内核文件描述符）的缩写，是一个在 Apple 设备上读写内核内存的项目。它利用各种可利用的漏洞来获取悬空 PTE（页表项），这被称为 PUAF 原语，即 physical use-after-free（物理释放后使用）的缩写。然后，它会在这些物理页内重新分配某些内核对象，并通过悬空 PTE 从用户空间直接操纵它们，以实现 KRKW 原语，即 kernel read/write（内核读写）的缩写。漏洞利用代码完全包含在一个库 libkfd 中，但该项目还包含针对...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: Wifi: rt2x00 – The beacon queue is restarted when a hardware reset occurs. When a hardware reset is triggered, all registers are reset, causing all queues to be stopped in the hardware interface. However, mac80211 does not...

Astra Linux – Vulnerability in Chromium

Incorrect security user interfaces in Page Info in Google Chrome on iOS prior to version 88.0.4324.96 allowed a remote attacker to spoof the security user interface through a crafted HTML page...

SUSE CVE-2026-17828

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

SUSE CVE-2026-17830

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-18003

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

CVE-2026-17841

CVE-2026-17841 describes a race condition in Chrome for iOS (Google Chrome on iOS) prior to version 151.0.7922.72 that allows a remote attacker to spoof UI via a crafted HTML page. The vulnerability affects the iOS build of Chrome using Chromium components and has a reported CVSSv3.1 base score o...

CVE-2026-17822

CVE-2026-17822 describes a race condition in Chrome for iOS (Google Chrome on iOS) prior to version 151.0.7922.72 that can allow a remote attacker to perform UI spoofing via a crafted HTML page. The vulnerability affects Chrome on iOS and is categorized with a medium severity; the attack vector i...

CVE-2026-17789

Affected software: Chrome for iOS / Google Chrome on iOS prior to 151.0.7922.72. Vulnerability: Insufficient validation of untrusted input in Chrome for iOS leading to bypass of navigation restrictions via malicious network traffic. Impact: Remote attacker could bypass navigation controls; CVSS s...

CVE-2026-17703

Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: High...

EUVD-2026-50810

Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

Linux Distros Unpatched Vulnerability : CVE-2026-17917

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass discretionary access contro...

CVE-2026-13813

An insufficient validation of untrusted input flaw was found in the Chrome for iOS component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=508462149...

CVE-2026-13843

An insufficient validation of untrusted input flaw was found in the Chrome for iOS component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=516869032...

CVE-2026-13918

An use after free flaw was found in the Chrome for iOS component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=509712284...