48603 matches found
CVE-2023-20198-Checker
Cisco-IOS-EX-Scanner CVE-2023-20198 CVE-2023-20198 & 0Day Implant Scanner tested in a lab and works, YMMV Quick and dirty scanner to run checks if the host is vulnerable/been compromised using 0day in Cisco IOS XE. This tool is designed to scan a given target or a list of targets to determine...
CVE-2018-4407
CVE-2018-4407 Massive IOS/MAC Attack Exploit CVE-2018-4407 is a Simple and Very Fast BOF attack Against IOS/MAC that can lead to DOS. The vulnerability is a heap buffer overflow in the networking code in the XNU operating system kernel. XNU is used by both iOS and macOS, which is why iPhones,...
OsirisJailbreak12
OsirisJailbreak12 iOS 12.0 - 12.1.2 Incomplete Jailbreak with CVE-2019-6225 An incomplete iOS 12 Jailbreak. For now it only runs the exploit, gets tfp0, gets ROOT, escapes the SandBox, writes a test file to prove the sandbox was escaped then resprings. Feel free to build on top of it as long as y...
cve-2017-7117
cve-2017-7117 About the Bug A type-confusion and UAF found in iOS 10.3.4 and earlier, Safari before 11.0. CVE-2017-7117: mitre.org Original Proof of Concept Discovered by @lokihardt, source: Google Project Zero function f let o = ; for let i in xx: 0 // i is a String for i of 0 // i is now a...
cisco-ios-xe-implant-detection
Сканирование имплантов Cisco IOS XE и обнаружение в сети Обнаружение в сети эксплуатации CVE-2023-20198 и снятие отпечатков fingerprinting постэксплуатации устройств Cisco IOS XE. Обнаружение в сети CVE-2023-20198 с помощью Suricata Папка suricata/ содержит правила обнаружения Suricata для...
Malimite
Description Malimite is an iOS and macOS decompiler designed to help researchers analyze and decode IPA files and Application Bundles. Built on top of Ghidra decompilation to offer direct support for Swift, Objective-C, and Apple resources. Features Multi-Platform Mac, Windows, Linux Direct suppo...
ios11-cookie-set-expire-issue
iOS 11 Cookie Set / Expire Issue There appears to be an intermittent issue with setting and expiring cookies in iOS 11 home screen web apps. Two erroneous behaviors can be observed: When a cookie is set and then the app is closed and re-opened, the cookie may no longer be present upon re-opening...
ARC-Browser-Address-Bar-Spoofing-PoC
ARC Browser Address Bar Spoofing - iOS/iPadOS CVE-2024-25733 ARC Browser Address Bar Spoofing PoC - iOS/iPadOS Exploit PoC Proof of Concept function spoof setTimeout = window.stop; let randomPort; do randomPort = Math.floorMath.random 1000; while randomPort === 0 || randomPort === 443;...
isslfix
iOS : iSSLFix: Certificate in chain starting at has isCA=0 = possible MITM attempt, making validation fail Because securityd...
yalu102
yalu102 A "work in progress" iOS jailbreak for 64-bit devices created by qwertyoruiopz and marcograssi. Please use the "Issues" tab for code related issues only. If you need support please search on /r/jailbreak before posting a question there. Supported Devices and iOS versions Device| Version...
CVE-2026-106309
A flaw was found in the Selection component of Google Chrome on iOS due to improper authorization. A remote attacker could exploit this vulnerability by tricking a user into visiting a crafted HTML page. Successful exploitation allows the attacker to access sensitive information...
Cisco IOS HTTP Configuration - Authentication Bypass
HTTP server for Cisco IOS 11.3 to 12.2 allows attackers to bypass authentication and execute arbitrary commands, when local authorization is being used, by specifying a high access level in the URL. id: CVE-2001-0537 info: name: Cisco IOS HTTP Configuration - Authentication Bypass author:...
CVE-2026-106414
A flaw was found in Google Chrome on iOS. Improper input validation allows a remote attacker to achieve arbitrary code execution outside the application sandbox. By using social engineering to convince a user to visit a specially crafted HTML page, an attacker can exploit this vulnerability to...
exploit_mitigations
Atténuations d'exploitation L'objectif est de lister les atténuations d'exploitation ajoutées au fil du temps dans divers systèmes d'exploitation, logiciels, bibliothèques ou matériels. Il devient pratique de savoir si une vulnérabilité donnée est facilement exploitable ou non en fonction des...
CVE-2026-43805-PoC
CVE-2026-43805: анализ состояния гонки IODMACommand и PoC Это анализ отсутствующей блокировки состояния в IODMACommand::PerformOperationImpl из Apple IOKit, обнаруженной путём сравнения бинарных файлов ядра macOS 26.5/26.6. В уязвимой сборке, пока PerformOperation использует состояние готовности ...
scrounger
Description Scrounger - une personne qui emprunte ou vit aux dépens des autres. Il n'y a pas de meilleure description pour cet outil pour deux raisons principales, la première est que cet outil s'inspire de nombreux autres outils déjà publiés, la seconde est qu'il vit des vulnérabilités des...
noia
Noia Noia est un outil web dont l'objectif principal est de faciliter le processus de navigation dans le bac à sable des applications mobiles et de prévisualiser directement les bases de données SQLite, les images, etc. Propulsé par frida.re. Veuillez noter que je ne suis pas un programmeur, mais...
toothpicker
ToothPicker ToothPicker est un fuzzer in-process guidé par couverture pour iOS. Il a été développé pour cibler spécifiquement le démon Bluetooth d'iOS bluetoothd et pour analyser divers protocoles Bluetooth sur iOS. Construit avec FRIDA, il peut être adapté pour cibler n'importe quelle plateforme...
Linux Distros Unpatched Vulnerability : CVE-2026-106427
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Confused deputy in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions into a privileged pag...
