POC

POC ¡Solo para fines de investigación! Una colección pública de POCs y Exploits para las vulnerabilidades que descubrí. CVE-2022-22583 PackageKit : Una aplicación podría acceder a archivos restringidos SIP Bypass CVE-2022-26690 PackageKit : Una aplicación maliciosa podría modificar partes...

CVE-2026-86909

A logic issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. An app may be able to bypass Gatekeeper checks...

CVE-2026-65399

A file quarantine bypass was addressed with additional checks. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27, watchOS 27. An archive may be able to bypass Gatekeeper...

CVE-2026-65383

This issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27. An app may bypass Gatekeeper checks...

CVE-2026-86909

CVE-2026-86909 is a logic issue in macOS Golden Gate 27 that affects Gatekeeper , Apple's application verification mechanism. The root cause is a flaw in state management, which was addressed with improved state handling in the fix. The practical impact is that an app may be able to bypass Gateke...

EUVD-2026-78123

A logic issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. An app may be able to bypass Gatekeeper checks...

EUVD-2026-77921

This issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27. An app may bypass Gatekeeper checks...

CVE-2026-65383

CVE-2026-65383 affects macOS Golden Gate 27 and involves Gatekeeper , Apple's application verification mechanism. An app may bypass Gatekeeper checks , potentially allowing unauthorized or unsigned code to execute without the usual trust validation. The issue was addressed with improved checks in...

EUVD-2026-77909

A file quarantine bypass was addressed with additional checks. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, visionOS 27, watchOS 27. An archive may be able to bypass Gatekeeper...

CVE-2023-22524

Atlassian Companion RCE脆弱性の概念実証 CVE-2023-22524 概要 このリポジトリには、macOS向けAtlassian Companionで最近発見されたリモートコード実行脆弱性（CVE-2023-22524）の概念実証（PoC）が含まれています。この重大な問題により、攻撃者はアプリのブロックリストとmacOS Gatekeeperを迂回し、有害なコードを実行する可能性があります。 詳細...

CVE-2021-30657

CVE-2021-30657 MacOSに影響するCVE-2021-30657のシンプルなPOC 脆弱性の詳細 syspolicydの脆弱性により、インターネットからダウンロードした特別に細工されたアプリケーションバンドルが、 File Quarantine、Gatekeeper、NotarizationなどのmacOSの基本的なセキュリティ機能をバイパスできるようになります。 この機能を利用することで、攻撃者はユーザーが（ダブル）クリックするだけでmacOSシステムをハッキングできる可能性があります。 使用方法 任意のシェルスクリプトをpayload.shに配置します。...

CVE-2021-30853

CVE-2021-30853 macOS に影響する CVE-2021-30657 をテストするためのシンプルな POC スクリプト。 この CVE により、ゲートキーパー、ノータリゼーション、XProtect のチェックをバイパスできます。 脆弱性の詳細 この脆弱性は、実行可能バンドルのメインスクリプトの最初の行（シバン）にインタープリタを定義しない（または、それ自体がシェルスクリプトであるインタープリタを指定する）場合に発生します。これにより、xpcproxy が posixspawnp...

CVE-2025-61228

CVE-2025-61228 경고 이 문제는 개발자가 주장하는 것보다 더 심각한 것으로 보이므로, 이 부분이 묻히지 않길 바랍니다. 개발자는 자신의 블로그에서 다음과 같이 언급했습니다: 이 문제는 시스템에서 실행 중인 프로그램이 SuperDuper의 업데이트를 확인하고 있을 때, 합법적인 수단을 통해 실제 업데이트가 제공되고, 사용자가 업그레이드를 클릭한 경우에만 발생할 수 있습니다. 이는 사실이 아닙니다. 이 취약점을 악용하기 위해 합법적인 수단을 통해 실제 업데이트가 제공될 필요는 없습니다. SuperDuper 3.10 및 ...

CVE-2023-22524

Atlassian Companion RCE 취약점 개념 증명 CVE-2023-22524 개요 이 저장소는 macOS용 Atlassian Companion에서 최근 발견된 원격 코드 실행 취약점CVE-2023-22524에 대한 개념 증명PoC을 포함합니다. 이 심각한 문제는 공격자가 앱의 차단 목록과 macOS Gatekeeper를 우회하여 유해한 코드를 실행할 수 있게 합니다. 세부 정보 이 취약점은 특정 파일 형식에 대한 애플리케이션의 처리와 macOS 보안 기능과의 상호 작용에서 발생한 간과로 인해 발생합니다. 취약점의 발...

vulnerabilities found in Apple MacOS

Apple has addressed several vulnerabilities in MacOS, specifically in the versions Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.x. These vulnerabilities involve various security issues in macOS, including insufficient sandbox restrictions, which may allow applications to gain unauthorized access t...

CVE-2026-28849

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.5. A maliciously crafted ZIP archive may bypass Gatekeeper checks...

CVE-2026-28900

A file quarantine bypass was addressed with additional checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. A maliciously crafted ZIP archive may bypass Gatekeeper checks...

CVE-2026-28900

CVE-2026-28900 affects macOS Sequoia 15.7.8 and macOS Sonoma 14.8.8, where a maliciously crafted ZIP archive could bypass Gatekeeper checks via insufficient file quarantine validation. The vulnerability’s remediation is the OS updates Sequoia 15.7.8 and Sonoma 14.8.8, which implement additional c...

CVE-2026-28900

A file quarantine bypass was addressed with additional checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.5. A maliciously crafted ZIP archive may bypass Gatekeeper checks...

CVE-2026-28849

CVE-2026-28849 affects macOS Sequoia 15.7.8 and macOS Sonoma 14.8.8. It describes a vulnerability where a maliciously crafted ZIP archive may bypass Gatekeeper checks, enabling potential execution with local access and user interaction required. Apple fixes implemented include improved checks/val...