Lucene search
+L

3770 matches found

Kitploit
Kitploit
added 2026/09/13 4:34 a.m.5 views

CVE-2025

CVE-2025-43300: Corrupción de Memoria en Procesamiento de Imágenes DNG de iOS/macOS Resumen CVE-2025-43300 es una vulnerabilidad crítica de corrupción de memoria en el framework de procesamiento de imágenes de Apple que afecta a iOS 18.6.1 y sistemas macOS. La vulnerabilidad existe en el código d...

10CVSS8.2AI score0.21994EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/09/12 5:56 a.m.8 views

weightBufs

WeightBufs: WeightBufs is a kernel r/w exploit for all Apple devices with Neural Engine support. Bugs and Exploit by @simo36, you can read my presentation slides at POC for more details about the vulnerabilities and the exploitation techniques. The exploit doesn't rely on any hardcoded address or...

10CVSS7.5AI score0.0465EPSS
SaveExploits3References1
Kitploit
Kitploit
added 2026/09/09 10:33 p.m.12 views

CVE-2026-28858

⚠️ CVE-2026-28858 — Buffer Overflow in Apple iOS/iPadOS root@kitploit: ╔══════════════════════════════════════════════════════════════╗ ║ SEVERITY: CRITICAL │ CVSS: 9.8 │ CWE-120 │ REMOTE ║ ╚══════════════════════════════════════════════════════════════╝ A remote user can cause unexpected system...

9.8CVSS6AI score0.00534EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/09 11:52 a.m.5 views

check_icmp_dos

checkicmpdos iOS 12 / OS X Remote Kernel Heap Overflow CVE-2018-4407 POC: root@kitploit: pip install scapy sudo scapy sendIPdst=“Target IP“,options=IPOption“A”8/TCPdport=2323,options=19, “1"18,19, “2”18 Or use the script root@kitploit: python checkicmpdos.py 127.0.0.1 This vulnerability allows an...

8.8CVSS8AI score0.22024EPSS
SaveExploits11
Kitploit
Kitploit
added 2026/09/08 10:04 p.m.7 views

check_icmp_dos-CVE-2018-4407-

Principio El principio consiste en hacer que otros campos del paquete "icmp" sean inválidos; cuando el kernel de macOS o iPhone los analiza, no se ha implementado la comprobación de tamaño, lo que provoca un crash. Dispositivos 1. Apple iOS 11 y versiones anteriores: todos los dispositivos 2. App...

8.8CVSS7.8AI score0.22024EPSS
SaveExploits11
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.10 views

Astra Linux – Vulnerability in Chromium

Insufficient policy enforcement in navigation in Google Chrome on iOS prior to 90.0.4430.72 allowed a remote attacker to bypass navigation restrictions through a crafted HTML page...

8.1CVSS7.3AI score0.01473EPSS
SaveExploits0References1
Circl
Circl
added 2026/08/18 4:49 a.m.14 views

CVE-2026-65339

creationtimestamp| type| source ---|---|--- 2026-08-18 04:49:49+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260818...

5CVSS4.8AI score0.00131EPSS
SaveExploits0References1
Circl
Circl
added 2026/08/18 4:49 a.m.14 views

CVE-2026-65332

creationtimestamp| type| source ---|---|--- 2026-08-18 04:49:33+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260818...

4.3CVSS4.8AI score0.00473EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/08/17 12:00 a.m.36 views

PT-2026-76847

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. An app may be able to cause unexpected system termination or corrupt kernel memory...

5.2AI score0.00232EPSS
SaveExploits1References3
GithubExploit
GithubExploit
added 2026/08/12 2:23 p.m.27 views

Exploit for Out-of-bounds Write in Apple Ipados

CVE-2026-28956 Donate Support the maintenance of this pro...

6.5CVSS5.6AI score0.00453EPSS
SaveExploits3
Cvelist
Cvelist
added 2026/07/27 8:11 p.m.40 views

CVE-2026-64722

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Tahoe 26.6. Processing a 3D model may result in disclosure of process memory...

0.00207EPSS
SaveExploits0References4
NVD
NVD
added 2026/06/29 8:17 p.m.22 views

CVE-2026-43700

A cross-origin issue was addressed with improved tracking of security origins. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may disclose...

6.5CVSS0.00269EPSS
SaveExploits1References7
CVE
CVE
added 2026/06/29 7:43 p.m.116 views

CVE-2026-39868

CVE-2026-39868 affects Apple platforms (macOS Tahoe, iOS, iPadOS) and centers on a risk from improper input validation in the kernel pathway that could allow an app to cause an unexpected system termination or kernel memory corruption. The vulnerability is addressed in macOS Tahoe 26.5.2 and iOS/...

9.1CVSS7.2AI score0.01214EPSS
SaveExploits1References8Affected Software3
CVE
CVE
added 2026/06/29 7:42 p.m.98 views

CVE-2026-43742

CVE-2026-43742 describes a use-after-free vulnerability tied to processing malicious web content, addressed by memory-management fixes in Safari 26.5.2, iOS 26.5.2 / iPadOS 26.5.2, and macOS Tahoe 26.5.2. Connected sources enumerate affected components including WebKit (and WebKit subareas like W...

6.5CVSS7.4AI score0.00393EPSS
SaveExploits0References7Affected Software4
RedhatCVE
RedhatCVE
added 2026/06/09 2:59 p.m.31 views

CVE-2026-47430

Summary The iOS implementation of cordova-plugin-inappbrowser passes the id field from a WKScriptMessage body to commandDelegate sendPluginResult:callbackId: with no format validation CDVWKInAppBrowser.m:560–574. Any web content loaded inside the InAppBrowser can fire any pending Cordova callback...

9.5CVSS5.4AI score0.00723EPSS
SaveExploits0References1
NVD
NVD
added 2026/06/04 11:16 p.m.18 views

CVE-2026-10951

Use after free in Autofill in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS0.00312EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/06/04 11:06 p.m.12 views

CVE-2026-11277

Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to bypass discretionary access control via a crafted HTML page. Chromium security severity: Low...

5.5AI score0.00213EPSS
SaveExploits0References2
CVE
CVE
added 2026/05/11 8:07 p.m.41 views

CVE-2026-28974

CVE-2026-28974 affects Apple platforms and is described as a denial-of-service risk due to an issue where an app could trigger unauthorized actions. Connected advisories confirm fixes in iOS/iPadOS 26.5, macOS Sequoia 15.7.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, and watchOS 26.5. Affected ...

7.5CVSS5.8AI score0.00407EPSS
SaveExploits0References6Affected Software6
CNNVD
CNNVD
added 2026/05/11 12:00 a.m.23 views

Apple iOS和Apple iPadOS 安全漏洞

Apple iOS and Apple iPadOS are products of the American company Apple. Apple iOS is an operating system developed for mobile devices. Apple iPadOS is an operating system for iPad tablets. Versions of Apple iOS prior to 26.5 and iPadOS prior to 26.5 contained security vulnerabilities. These...

7.5CVSS5.8AI score0.00284EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/05/11 12:00 a.m.37 views

Apple iOS和Apple iPadOS 安全漏洞

Apple iOS and Apple iPadOS are products of the American company Apple. Apple iOS is an operating system developed for mobile devices. Apple iPadOS is an operating system for iPad tablets. There were security vulnerabilities in versions of Apple iOS before 18.7.9, as well as versions before 26.4,...

7.5CVSS5.8AI score0.00461EPSS
SaveExploits0References2
Rows per page
Query Builder