ABrake27

ABrake27 iOS AMFI開発者モード有効化のためのLinuxネイティブクロスコンパイラ + PoC arm64/arm64e 研究グレードのツールキット。 iOS 27.0.1と27.2のファームウェアを差分比較し、AMFI IOUserClientディスパッチテーブルをリバースエンジニアリングし、Linux からベアメタルのIOKit PoCをクロスコンパイルし（Xcode不要）、標準のApple lockdownプロトコル経由でiOS 27.0.1の開発者モードを有効化 します（カーネルレベルで永続性を検証済み）。 これは何か IPSファームウェア差分 — iOS...

CVE-2024-40815

CVE-2024-40815 POC for CVE-2024-40815 構築は最終段階です ==IOS 17.0...

patch-CVE-2026-19843

パッチ: CVE-2026-19843 脆弱性の詳細 CVE : CVE-2026-19843 製品 : Cisco IOS XE 説明 : Web UI を介した権限昇格 深刻度 : 高 パッチの状態: デプロイ済み フィールド| 値 ---|--- パッチ適用日| 2026-06-15 ステータス| デプロイ済み デプロイ先| 本番環境 検証者| SecOps チーム 参考 NVD CISA KEV...

SSLPatch

SSL 패치 CVE-2014-1266 저작권 c 2014 Linus Yang 소개 CVE-2014-1266는 'goto fail SSL 검증 익스플로잇'으로 알려진, iOS 및 OS X의 매우 심각한 SSL/TLS 취약점입니다. Apple은 이 문제를 해결하기 위해 iOS 6.1.6과 7.0.6을 배포했지만, iOS 7으로 업그레이드할 수 없거나 업그레이드하고 싶지 않은 일부 사용자예: 구형 기기 사용자 또는 iOS 7 안티 :P는 무시합니다. 마침내, 특히 iOS 탈옥 사용자를 위한 우아한 해결책이 있습니다: 이 SSL 취약...

jitsploitation

jitsploitation iOS 브라우저 익스플로잇 CVE-2020-9802, 오래된 JIT 버그. 이것은 Project Zero가 원래 문서화한 macOS 및 iOS용 WebKit 엔진의 유명한 JIT 컴파일러 버그에 대한 익스플로잇입니다. 이 버그에 대한 익스플로잇을 브라우저 익스플로잇 학습 연습으로 다시 구현했습니다. 동영상 설명: 클릭 한 번으로 아이폰 해킹하기 크레딧 ProjectZero 블로그 JakeBlair420 구현...

PT-2026-106871

Missing authorization in Navigation in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy into a privileged page via a crafted HTML page. Chromium security severity: Medium...

PT-2026-107069

Incorrect authorization in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

PT-2026-107078

Missing authorization in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

PT-2026-107099

Confused deputy in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106408: Protection Mechanism Failure

Protection mechanism failure in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106397: Incorrect Authorization

Incorrect authorization in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106387: Missing Authorization

Missing authorization in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106361: Incorrect Provision of Specified Functionality

Incorrect provision of specified functionality in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. Chromium security severity: Medium...

CVE-2026-106427: Unintended Proxy or Intermediary

Confused deputy in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted HTML page. Chromium security severity: Low...

PT-2026-106881

Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via crafted network traffic. Chromium security severity: Medium...

PT-2026-106952

Incorrect reference resolution in Passwords in Google Chrome on on iOS prior to 155.0.8059.39 allowed a local attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a local program. Chromium security severity: Medium...

PT-2026-106867

Information leak in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a local attacker to obtain sensitive information via physical access. Chromium security severity: Low...

PT-2026-107053

Incorrect authorization in Passwords in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

PT-2026-107025

Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via a co-installed app. Chromium security severity: Low...

PT-2026-106982

Incorrect authorization in Selection in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...