empty_list

emptylist - exploit para el problema p0 1564 CVE-2018-4243 iOS 11.0 - 11.3.1 kernel r/w @i41nbeer FALLO: getvolattrlist toma un argumento bufferSize controlado por el usuario a través de la llamada al sistema fgetattrlist. Al asignar un búfer del kernel para serializar la lista de atributos, se...

Possible Vulnerability in Apple’s Automatic Reboot

404Media is reporting alternate link that a cyber-weapons arms manufacturer is exploiting a vulnerability in iOS to bypass its automatic reboot security feature. This is the feature that automatically puts an iPhone into a more secure state if it hasn't been used for 72 hours. The new technology ...

CVE-2025-20352

CVE-2025-20352 Verificación de exposición SNMP onesixtyone + parser Comprobación de exposición black-box rápida y segura para dispositivos Cisco IOS/IOS XE relacionada con CVE-2025-20352 subsistema SNMP: 1. Escanea tus subredes en busca de SNMP con onesixtyone y las comunidades por defecto. 2...

glass-cage-i18-2025-24085-and-cve-2025-24201

Original Fork Network Left Glass Cage: Cadena de Explotación PNG de Cero Clic para iOS 18.2.1 CVE-2025-24201 – Ejecución Remota de Código en WebKit CVE-2025-24085 – Escalada de Privilegios en Core Media Reportado a Apple: 9 de enero de 2025 Parcheado: febrero–marzo de 2025 Probado en: iPhone 14 P...

ABrake27

ABrake27 Linux-native cross-compiler + PoC for iOS AMFI Developer Mode activation arm64/arm64e Research-grade toolkit. Diff iOS 27.0.1 vs 27.2 firmware, reverse-engineer the AMFI IOUserClient dispatch table, cross-compile a bare-metal IOKit PoC from Linux — no Xcode required — and enable Develope...

CVE-2024-40815

CVE-2024-40815 POC para CVE-2024-40815 La construcción está en su etapa final ==IOS 17.0...

patch-CVE-2026-19843

Parche: CVE-2026-19843 Detalles de la vulnerabilidad CVE : CVE-2026-19843 Producto : Cisco IOS XE Descripción : Escalada de privilegios a través de la interfaz web Gravedad : Alta Estado del parche: DESPLEGADO Campo| Valor ---|--- Fecha del parche| 2026-06-15 Estado| desplegado Desplegado en|...

SSLPatch

SSL Patch CVE-2014-1266 Copyright c 2014 Linus Yang Introducción La CVE-2014-1266 , también conocida como el exploit de verificación SSL "goto fail", es una vulnerabilidad SSL/TLS muy grave de iOS y OS X. Apple lanzó iOS 6.1.6 y 7.0.6 para solucionar este problema, pero ignora a algunos usuarios...

jitsploitation

jitsploitation Exploit de navegador iOS para CVE-2020-9802, un antiguo bug de JIT. Este es un exploit para un bug popular del compilador JIT en el motor WebKit para macOS y iOS originalmente documentado por Project Zero. Reimplementé el exploit para este bug como un ejercicio de aprendizaje de...

PT-2026-107025

Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via a co-installed app. Chromium security severity: Low...

PT-2026-107069

Incorrect authorization in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

PT-2026-107078

Missing authorization in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

PT-2026-107053

Incorrect authorization in Passwords in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

PT-2026-106867

Information leak in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a local attacker to obtain sensitive information via physical access. Chromium security severity: Low...

PT-2026-106864

Code injection in ReaderMode in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

PT-2026-106881

Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via crafted network traffic. Chromium security severity: Medium...

PT-2026-106878

Incomplete cleanup in Autofill in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: High...

CVE-2026-106427: Unintended Proxy or Intermediary

Confused deputy in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted HTML page. Chromium security severity: Low...

PT-2026-107099

Confused deputy in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted HTML page. Chromium security severity: Low...

PT-2026-106952

Incorrect reference resolution in Passwords in Google Chrome on on iOS prior to 155.0.8059.39 allowed a local attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a local program. Chromium security severity: Medium...