POC

POC केवल शोध उद्देश्यों के लिए! मेरे द्वारा खोजी गई कमजोरियों के लिए POCs और एक्सप्लॉइट्स का एक सार्वजनिक संग्रह। CVE-2022-22583 PackageKit : एक एप्लिकेशन प्रतिबंधित फ़ाइलों तक पहुँच सकता है SIP बाईपास CVE-2022-26690 PackageKit : एक दुर्भावनापूर्ण एप्लिकेशन फ़ाइल सिस्टम के संरक्षित हिस्सों को...

CVE-2021-30657

CVE-2021-30657 MacOS को प्रभावित करने वाले CVE-2021-30657 के लिए एक सरल POC भेद्यता विवरण syspolicyd में एक भेद्यता इंटरनेट से डाउनलोड किए गए विशेष रूप से तैयार एप्लिकेशन बंडल को macOS की मूलभूत सुरक्षा सुविधाओं जैसे फ़ाइल क्वारंटाइन, गेटकीपर और नोटरीकरण को बायपास करने की अनुमति देती है। इस क्षमत...

CVE-2023-22524

एटलासियन कम्पैनियन RCE भेद्यता प्रूफ ऑफ कॉन्सेप्ट CVE-2023-22524 अवलोकन यह रिपॉजिटरी macOS के लिए एटलासियन कम्पैनियन में हाल ही में खोजी गई remote code execution भेद्यता CVE-2023-22524 के लिए एक proof of concept PoC शामिल करता है। यह गंभीर समस्या हमलावरों को ऐप की ब्लॉकलिस्ट और macOS Gatekeeper क...

CVE-2023-22524

إثبات المفهوم لثغرة تنفيذ التعليمات البرمجية عن بُعد في Atlassian Companion CVE-2023-22524 نظرة عامة يحتوي هذا المستودع على إثبات مفهوم PoC لثغرة تنفيذ التعليمات البرمجية عن بُعد التي تم اكتشافها مؤخرًا في تطبيق Atlassian Companion لنظام macOS، والمعروفة باسم CVE-2023-22524. تسمح هذه المشكلة الحر...

CVE-2025-61228

CVE-2025-61228 تنبيه يبدو أن هذه المشكلة أسوأ مما يقترحه المطور، لذا لا أريد أن يضيع هذا الجزء في التفاصيل. ذكر المطور في مدونته: يمكن أن يحدث هذا فقط إذا كان برنامج يعمل على نظامك يبحث عن SuperDuper لإجراء تحديث، ويتم تقديم تحديث حقيقي من خلال وسائل شرعية، وتنقر على ترقية. هذا ليس صحيحًا في...

vulnerabilities found in Apple MacOS

Apple has addressed several vulnerabilities in MacOS, specifically in the versions Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.x. These vulnerabilities involve various security issues in macOS, including insufficient sandbox restrictions, which may allow applications to gain unauthorized access t...

CVE-2026-28849

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.5. A maliciously crafted ZIP archive may bypass Gatekeeper checks...

CVE-2026-28900

A file quarantine bypass was addressed with additional checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. A maliciously crafted ZIP archive may bypass Gatekeeper checks...

CVE-2026-28900

CVE-2026-28900 affects macOS Sequoia 15.7.8 and macOS Sonoma 14.8.8, where a maliciously crafted ZIP archive could bypass Gatekeeper checks via insufficient file quarantine validation. The vulnerability’s remediation is the OS updates Sequoia 15.7.8 and Sonoma 14.8.8, which implement additional c...

CVE-2026-28900

A file quarantine bypass was addressed with additional checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.5. A maliciously crafted ZIP archive may bypass Gatekeeper checks...

CVE-2026-28849

CVE-2026-28849 affects macOS Sequoia 15.7.8 and macOS Sonoma 14.8.8. It describes a vulnerability where a maliciously crafted ZIP archive may bypass Gatekeeper checks, enabling potential execution with local access and user interaction required. Apple fixes implemented include improved checks/val...

EUVD-2026-49436

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. A maliciously crafted ZIP archive may bypass Gatekeeper checks...

CVE-2026-28849

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.5. A maliciously crafted ZIP archive may bypass Gatekeeper checks...

CVE-2026-28849

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. A maliciously crafted ZIP archive may bypass Gatekeeper checks...

CVE-2026-28849

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.5. A maliciously crafted ZIP archive may bypass Gatekeeper checks...

macOS 14.x < 14.8.8 Multiple Vulnerabilities (128072)

The remote host is running a version of macOS / Mac OS X that is 14.x prior to 14.8.8. It is, therefore, affected by multiple vulnerabilities: - The issue was addressed with improved input sanitization. This issue is fixed in iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. An app may be able to...

macOS 15.x < 15.7.8 Multiple Vulnerabilities (128071)

The remote host is running a version of macOS / Mac OS X that is 15.x prior to 15.7.8. It is, therefore, affected by multiple vulnerabilities: - The issue was addressed with improved input sanitization. This issue is fixed in iOS 26.5.2 and iPadOS 26.5.2, macOS Tahoe 26.5.2. An app may be able to...

CrashStealer macOS Malware Uses Notarized Dropper to Pass Gatekeeper Checks

Cybersecurity researchers have flagged a new macOS information stealer called CrashStealer that's capable of harvesting sensitive data from compromised systems. Unlike other information stealers that are built on AppleScript droppers or Objective-C-based wrappers, CrashStealer is implemented in...

CVE-2026-42890

Actual is an open-source personal finance application. In the macOS desktop application version 25.x built on Electron 39.2.7, the ELECTRONRUNASNODE fuse is not disabled, allowing an attacker who can place a file on disk or control command-line arguments to invoke the signed Actual.app binary wit...

Arbitrary Code Injection

Overview desktop-electron is a My Electron application description Affected versions of this package are vulnerable to Arbitrary Code Injection via the ELECTRONRUNASNODE environment variable. An attacker can execute arbitrary code with the application's entitlements and code signature by launchin...