143 matches found
ffs
FFS - F νμΌ μμ€ν μ΄κ²μ νμΌμ κ²μνκΈ° μν CLI λꡬλ‘grepμ²λΌ, OS 컀λμ μ¬μ©ν΄ νμΌμ μ½μ§ μκ³ λμ€ν¬λ₯Ό μ§μ μ½μ΅λλ€. μ€μ§μ μΌλ‘λ μΈλͺ¨μμ§λ§ λ―ΈμΉ λ―μ΄ λ©μ§λλ€. μ΄κ²μ λ¨μ§ μ½ 1.5kμ€μ C μ½λλ‘ κ΅¬μ±λμ΄ μμΌλ©°: raw λλ°μ΄μ€ λ Έλμ: /dev/rdiskλ₯Ό μ½μ λλ§ sudoκ° νμν©λλ€. μ΄λ―Έμ§ νμΌμ κ²μν λλ λμ κΆνμ΄ νμ μμ΅λλ€. macOS κΈ°λ³Έ λμ€ν¬μμ μ€ννλ €λ©΄ SIP 보νΈλ₯Ό λΉνμ±νν΄μΌ ν©λλ€. μ΅κ·Όμ μ΄ μΌλΆ νμΌμ λμΉ μ μμ΅λλ€μλμΌλ‘ sync νΈμΆμ΄ νμν μ...
CVE-2023-38571-a-macOS-TCC-bypass-in-Music-and-TV
μμ½ macOS Music λ° TV μ±μ΄ μμ νμ§ μμ μ΄λ¦ λ³κ²½renameμ μννμ¬ μ¬μ©μμ TCC.dbμ λν μμ ν μ μ΄κΆμ μ»μμΌλ‘μ¨ FDAFull Disk Accessλ₯Ό νλν©λλ€. ν΄λΉ λ²κ·Έλ₯Ό κ° μ±μ λν΄ λ³λ ν°μΌμΌλ‘ μ κ³ νμ΅λλ€. ν΄λΉλλ κ²½μ° λ³ν©ν΄ μ£ΌμΈμ. κ·Όλ³Έμ μΈ λ¬Έμ λ μ΄λ¬ν μ±λ€μ΄ FDAλ₯Ό κ°μ§κ³ μμ§λ§ νμΌ μμ μ κ²μ¦sanitizeνμ§ λͺ»νλ€λ μ μ λλ€. μ΅μ€νλ‘μ μ€λͺ Musicκ³Ό TVλ μ΄ μ μμ κ±°μ λμΌνλ©°, κ²½λ‘λ§ λ€λ¦ λλ€. μ΄νλΆν°λ Musicμ μλ‘ μ¬μ©νκ² μ΅λλ€. TVμ κ²½μ° μ΅μ€ν...
santa
Santa !NOTE As of 2025, Santa is no longer maintained by Google. We encourage existing users to migrate to an actively maintained fork of Santa, such as https://github.com/northpolesec/santa. Santa is a binary and file access authorization system for macOS. It consists of a system extension that...
CVE-2025-61229
CVE-2025-61229 μ€λͺ κ°λ°μ λΈλ‘κ·Έμμ: μ¬μ©μκ° μ€μ ν μ μλ Before/After μ Έ μ€ν¬λ¦½νΈλ SuperDuperμ TCC μ 체 λμ€ν¬ μ κ·Ό κΆνμΌλ‘ μΉκ²©λμ΄ μ€νλ©λλ€. ν΄λΉ μ Έ μ€ν¬λ¦½νΈλ λ³΅μ¬ λλ μΌμ μ€μ νμΌμμ μ°Έμ‘°λλ―λ‘, μ μμ μΈ νμμκ° κ·Έλ¬ν μ€μ μ μμ νμ¬ μμ μ μ€ν¬λ¦½νΈλ₯Ό μ€νν μ μμ΅λλ€. CVEμμ: Shirt Pocketμ SuperDuper! 3.10 λ° μ΄μ λ²μ μ λ¬Έμ λ‘ μΈν΄ λ‘컬 곡격μκ° κΈ°λ³Έ μμ ν νλ¦Ώμ μμ νμ¬ μμμ μ¬μ μ€ν μ€ν¬λ¦½νΈλ₯Ό λ£¨νΈ κΆν λ° μ 체 λμ€ν¬ μ ...
CVE-2026-65400-poc
CVE-2026-65400 β macOS νλ©΄ 곡μ μΈμ¦ μ root νμΌ μ½κΈ°μ½κΈ° μ μ© PoC μ½κΈ° μ μ© κ°λ μ¦λͺ PoCμ λλ€. μ·¨μ½ν νΈμ€νΈμμ rootλ§ μ½μ μ μλ νμΌμ μ½μ΄ μΈμ¦ μ°νλ₯Ό μ μ¦ν©λλ€. λμμ μ무κ²λ μ°μ§ μμ΅λλ€: LaunchDaemon, μ Έ μμ νμΌ, crontab, RCE μ²΄μΈ μμ. μ κ° μμ ν Macμμ μ€ννμ΅λλ€ macOS Tahoe 26.5.2, ν¨μΉ μ λ¨. μΌλ ¨λ²νΈλ μμ νμ΅λλ€. μμ½ screensharingd β macOS νλ©΄ 곡μ / Apple μ격 κ΄λ¦¬ μ λ°λͺ¬ TCP...
PYSEC-2026-1778 PGHoard Path Traversal vulnerability
A vulnerability has been discovered that could allow an attacker to acquire disk access with privileges equivalent to those of pghoard, allowing for unintended path traversal. Depending on the permissions/privileges assigned to pghoard, this could allow disclosure of sensitive information...
CVE-2026-33054 Mesop: Path Traversal utilizing `FileStateSessionBackend` leads to Application Denial of Service and File Write/Deletion
Mesop is a Python-based UI framework that allows users to build web applications. Versions 1.2.2 and below contain a Path Traversal vulnerability that allows any user supplying an untrusted statetoken through the UI stream payload to arbitrarily target files on the disk under the standard...
CVE-2025-69604
An issue in Shirt Pocket's SuperDuper! 3.11 and earlier allow a local attacker to modify the default task template to install an arbitrary package that can run shell scripts with root privileges and Full Disk Access, thus bypassing macOS privacy controls...
EUVD-2025-206519
An issue in Shirt Pocket's SuperDuper! 3.11 and earlier allow a local attacker to modify the default task template to install an arbitrary package that can run shell scripts with root privileges and Full Disk Access, thus bypassing macOS privacy controls...
PT-2026-5345
An issue in Shirt Pocket's SuperDuper! 3.11 and earlier allow a local attacker to modify the default task template to install an arbitrary package that can run shell scripts with root privileges and Full Disk Access, thus bypassing macOS privacy controls...
CVE-2025-69604
An issue in Shirt Pocket's SuperDuper! 3.11 and earlier allow a local attacker to modify the default task template to install an arbitrary package that can run shell scripts with root privileges and Full Disk Access, thus bypassing macOS privacy controls...
CVE-2025-69604
An issue in Shirt Pocket's SuperDuper! 3.11 and earlier allow a local attacker to modify the default task template to install an arbitrary package that can run shell scripts with root privileges and Full Disk Access, thus bypassing macOS privacy controls...
CVE-2025-69604
CVE-2025-69604 affects Shirt Pocketβs SuperDuper! 3.11 and earlier. A local attacker can modify the default task template to install an arbitrary package that can run shell scripts with root privileges and Full Disk Access, thereby bypassing macOS privacy controls. Affected component: the SuperDu...
CVE-2021-31727
Incorrect access control in zam64.sys, zam32.sys in MalwareFox AntiMalware 2.74.0.150 where IOCTL's 0x80002014, 0x80002018 expose unrestricted disk read/write capabilities respectively. A non-privileged process can open a handle to \.\ZemanaAntiMalware, register with the driver using IOCTL...
CVE-2025-64699
An incorrect NULL DACL issue exists in SevenCs ORCA G2 2.0.1.35 EC2007 Kernel v5.22. The regService process, which runs with SYSTEM privileges, applies a Security Descriptor to a device object with no explicitly configured DACL. This condition could allow an attacker to perform unauthorized raw...
EUVD-2025-206011
An incorrect NULL DACL issue exists in SevenCs ORCA G2 2.0.1.35 EC2007 Kernel v5.22. The regService process, which runs with SYSTEM privileges, applies a Security Descriptor to a device object with no explicitly configured DACL. This condition could allow an attacker to perform unauthorized raw...
CVE-2025-64699
An incorrect NULL DACL issue exists in SevenCs ORCA G2 2.0.1.35 EC2007 Kernel v5.22. The regService process, which runs with SYSTEM privileges, applies a Security Descriptor to a device object with no explicitly configured DACL. This condition could allow an attacker to perform unauthorized raw...
CVE-2025-64699
An incorrect NULL DACL issue exists in SevenCs ORCA G2 2.0.1.35 EC2007 Kernel v5.22. The regService process, which runs with SYSTEM privileges, applies a Security Descriptor to a device object with no explicitly configured DACL. This condition could allow an attacker to perform unauthorized raw...
CVE-2025-64699
An incorrect NULL DACL issue exists in SevenCs ORCA G2 2.0.1.35 EC2007 Kernel v5.22. The regService process, which runs with SYSTEM privileges, applies a Security Descriptor to a device object with no explicitly configured DACL. This condition could allow an attacker to perform unauthorized raw...
CVE-2025-64699
An incorrect NULL DACL issue exists in SevenCs ORCA G2 2.0.1.35 EC2007 Kernel v5.22. The regService process, which runs with SYSTEM privileges, applies a Security Descriptor to a device object with no explicitly configured DACL. This condition could allow an attacker to perform unauthorized raw...