MAL-2025-192028 Malicious code in elf-stats-festive-cocoa-106 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cbfbcb889b20cc49220f86924c8ad4e7f8da73bd8099f6971d268488b4bdfc9 The package elf-stats-festive-cocoa-106 was found to contain malicious code...

MAL-2025-192008 Malicious code in elf-stats-cocoa-northstar-632 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 617eee1622896f30c465f8c9f1eaa6740f06b3f91a2001e60ebc99e353bf28dc The package elf-stats-cocoa-northstar-632 was found to contain malicious code...

Malicious code in elf-stats-storybook-cocoa-790 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7264ce538af955482e86c5f7e1d36b07b3735a4e986e249a5fc8f0e7bdcc5943 The package elf-stats-storybook-cocoa-790 was found to contain malicious code...

MAL-2025-49403 Malicious code in elf-stats-storybook-cocoa-790 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7264ce538af955482e86c5f7e1d36b07b3735a4e986e249a5fc8f0e7bdcc5943 The package elf-stats-storybook-cocoa-790 was found to contain malicious code...

EUVD-2010-0088

Malware in sbrugna...

EUVD-2016-2897

Malware in sbrugna...

Malicious code in @malware-test-cocoa-minke-apron-wound/test-mlw3-cocoa-minke-apron-wound (npm)

The package @malware-test-cocoa-minke-apron-wound/test-mlw3-cocoa-minke-apron-wound was found to contain malicious code...

The vulnerability of dependency managers for Swift and Objective-C CocoaPods allows an attacker to gain unauthorized access to protected information about certain projects, modify their contents, or replace it with arbitrary code by exploiting errors in data handling.

The vulnerability of dependency managers for Swift and Objective-C CocoaPods relates to the disclosure of information in the erroneous data area. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information about certain dependencie...

reef (>=0.0.46, <=0.0.82) potentially affected by CVE-2024-21530 via cocoon (>=0.2.5, <=0.3.3)

cocoon CARGO version =0.2.5, =0.0.46, =0.0.82 Source cves: CVE-2024-21530 Source advisory: OSV:RUSTSEC-2023-0068...

SwiftBelt - A macOS Enumeration Tool Inspired By Harmjoy'S Windows-based Seatbelt Enumeration Tool

SwiftBelt is a macOS enumerator inspired by @harmjoy's Windows-based Seatbelt enumeration tool. SwiftBelt does not utilize any command line utilities and instead uses Swift code leveraging the Cocoa Framework, Foundation libraries, OSAKit libraries, etc. to perform system enumeration. This can be...

CVE-2019-8342

A Local Privilege Escalation in libqcocoa.dylib in Foxit Reader 3.1.0.0111 on macOS has been discovered due to an incorrect permission set...

Introduction to Reverse Engineering Cocoa Applications

While not as common as Windows malware, there has been a steady stream of malware discovered over the years that runs on the OS X operating system, now rebranded as macOS. February saw three particularly interesting publications on the topic of macOS malware: a Trojan Cocoa application that sends...

Introduction to Reverse Engineering Cocoa Applications

While not as common as Windows malware, there has been a steady stream of malware discovered over the years that runs on the OS X operating system, now rebranded as macOS. February saw three particularly interesting publications on the topic of macOS malware: a Trojan Cocoa application that sends...

The Dawn of OSX Worms – Renepo/Leap-A

2004 and 2006 A few years after the release of OS X, 2004 brought a new shell script worm called Renepo. The worm’s main goal was to disable Mac OS X’s firewall and security settings. It also installed tools for password-sniffing and made key system directories world-writeable, undetected. The wo...

CVE-2010-0056

Buffer overflow in Cocoa spell checking in AppKit in Apple Mac OS X 10.5.8 allows user-assisted remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted document...

Buffer overflow

Buffer overflow in Cocoa spell checking in AppKit in Apple Mac OS X 10.5.8 allows user-assisted remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted document...

CVE-2010-0056

CVE-2010-0056: Buffer overflow in Cocoa spell checking (AppKit) on Apple Mac OS X 10.5.8. The flaw allows a user-assisted remote attacker to trigger arbitrary code execution or cause a denial of service (application crash) via a crafted document. Affected component: Cocoa spell checking in AppKit...

CVE-2010-0056

Buffer overflow in Cocoa spell checking in AppKit in Apple Mac OS X 10.5.8 allows user-assisted remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted document...

CVE-2010-0056: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Cocoa spell checking in AppKit in Apple Mac OS X 10.5.8 allows user-assisted remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted document...

CVE-2007-0023

The CFUserNotificationSendRequest function in UserNotificationCenter.app in Apple Mac OS X 10.4.8, when used in combination with diskutil, allows local users to gain privileges via a malicious InputManager in Library/InputManagers in a user's home directory, which is executed when Cocoa...