CVE-2023-49313

CVE-2023-49313 XMachOViewer 0.04 में एक dylib इंजेक्शन भेद्यता हमलावरों को अखंडता से समझौता करने की अनुमति देती है। इसका शोषण करके, उत्पाद की प्रक्रियाओं में अनधिकृत कोड इंजेक्ट किया जा सकता है, जो संभावित रूप से दूरस्थ नियंत्रण और संवेदनशील उपयोगकर्ता डेटा तक अनधिकृत पहुंच की ओर ले जाता है। macO...

CVE-2025-65741

CVE-2025-65741 - Sublime Text 3 vulnérable à l'injection de Dylib pour macOS root@kitploit: Download: https://www.sublimetext.com/3 CVE: CVE-2025-65741 | https://nvd.nist.gov/vuln/detail/CVE-2025-65741 Author: Vinicius Batistella Version Affected: Sublime Text 3 Build 3208 or prior for macOS...

CVE-2024-55503

CVE-2024-55503 Termius ऐप MacOS dylib कमांड इंजेक्शन विवरण v.9.9.0 से पहले Termius में एक समस्या एक स्थानीय हमलावर को DYLDINSERTLIBRARIES घटक में क्राफ्टेड स्क्रिप्ट के माध्यम से मनमाना कोड निष्पादित करने की अनुमति देती है। dylib का उपयोग करके root@kitploit:...

ios-malicious-bithunter

iOS Malicious Bit Hunter Zusammenfassung iOS Malicious Bit Hunter ist eine Erkennungs-Engine für bösartige Plugins in iOS-Anwendungen. Sie kann den Header der MachO-Datei der injizierten dylib-Dynamikbibliothek zur Laufzeit analysieren und durch Eingabecharakteristiken der Schnittstelle eine...

CVE-2024-53407

CVE-2024-53407 Dans Phiewer 4.1.0, une injection de dylib conduit à une exécution de commande, permettant aux attaquants d'injecter un fichier .dylib, ce qui peut entraîner un contrôle à distance et un accès non autorisé à des données utilisateur sensibles sous macOS. Reproduction utilisez le...

Swift-Attack

Swift-Attack Test unitari per i blue team per aiutare a costruire rilevamenti per alcuni metodi comuni di post-exploitation su macOS. Ho incluso alcuni esempi di post-exploitation sia utilizzando la cronologia della riga di comando che chiamate API. Gli esempi di post-exploitation inclusi qui non...

macOSTools

macOSTools Strumenti Offensivi per macOS AUnit Progetto XCode di esempio per plugin Audio Unit MigrationToolPayload Plugin dello strumento di migrazione SpecialDelivery Plugin di installazione authplugin Plugin di autenticazione dylibinjection Codice sorgente per l'iniezione dylib. Basato sul...

DylibHijackTest

DylibHijackTest Requisiti Installare i requisiti Python3: pip3 install -r requirements.txt Compilare la dylib dal sorgente perché non ci si fida delle cose compilate prese da GitHub: gcc -dynamiclib DylibHijackTest.c -o DylibHijackTest.dylib Come Funziona ⚠️ Questo genererà molti processi sulla tu...

bfdecrypt

bfdecrypt Dienstprogramm zum Entschlüsseln von App-Store-Apps auf gejailbreakten iOS 11.x App-Store-Apps auf LiberiOS entschlüsseln Hier ist ein Beispiel mit https://github.com/BishopFox/bfinject zum Entschlüsseln der Reddit-App auf einem mit Electra gejailbreakten iPhone: root@kitploit: Cs-iPhon...

bfinject

bfinject Einfache Dylib-Injektion für gejailbreakte 64-Bit-iOS-11.0–11.1.2-Geräte. Kompatibel mit den Electra- und LiberiOS-Jailbreaks. bfinject lädt beliebige Dylibs in laufende App-Store-Apps. Es verfügt über integrierte Unterstützung zum Entschlüsseln von App-Store-Apps und wird mit iSpy und...

PT-2026-47796

1 Local Privilege Escalation via DYLIB Injection CVE-2026-24064 2 Local Privilege Escalation via Insecure XPC Client Validation CVE-2026-24065 Multiple Local Privilege Escalation Vulnerabilities in Waves Audio Waves Central https://t.co/fkys4ePhWy...

PT-2026-47795

Name of the Vulnerable Software and Affected Versions Waves Central for macOS versions 13.0.9 through 16.5.5 Description A trusted XPC client component is signed with hardened runtime entitlements that allow dynamic library injection. A local attacker can use the DYLD INSERT LIBRARIES environment...

CVE-2026-24070

During the installation of the Native Access application, a privileged helper com.native-instruments.NativeAccess.Helper2, which is used by Native Access to trigger functions via XPC communication like copy-file, remove or set-permissions, is deployed as well. The communication with the XPC servi...

CVE-2026-24070

During the installation of the Native Access application, a privileged helper com.native-instruments.NativeAccess.Helper2, which is used by Native Access to trigger functions via XPC communication like copy-file, remove or set-permissions, is deployed as well. The communication with the XPC servi...

CVE-2026-24070 Local Privilege Escalation via DYLIB Injection in Native Instruments Native Access

During the installation of the Native Access application, a privileged helper com.native-instruments.NativeAccess.Helper2, which is used by Native Access to trigger functions via XPC communication like copy-file, remove or set-permissions, is deployed as well. The communication with the XPC servi...

EUVD-2026-5108

During the installation of the Native Access application, a privileged helper com.native-instruments.NativeAccess.Helper2, which is used by Native Access to trigger functions via XPC communication like copy-file, remove or set-permissions, is deployed as well. The communication with the XPC servi...

PT-2026-5657

Name of the Vulnerable Software and Affected Versions Native Instruments Native Access affected versions not specified Description The Native Access application installs a privileged helper, com.native-instruments.NativeAccess.Helper2, used for triggering functions via XPC communication, such as...

CVE-2023-49313

A dylib injection vulnerability in XMachOViewer 0.04 allows attackers to compromise integrity. By exploiting this, unauthorized code can be injected into the product's processes, potentially leading to remote control and unauthorized access to sensitive user data...

CVE-2019-20856

An issue was discovered in Mattermost Desktop App before 4.3.0 on macOS. It allows dylib injection...

CVE-2025-65741

Sublime Text 3 Build 3208 or prior for MacOS is vulnerable to Dylib Injection. An attacker could compile a .dylib file and force the execution of this library in the context of the Sublime Text application...