283 matches found
ipatool
ipatool is a command line tool that allows you to search for iOS, iPadOS, tvOS, visionOS, and macOS apps on the App Store, and download .ipa or macOS .pkg app packages. Requirements A supported operating system macOS, Linux, Windows or iOS. An Apple Account already configured to use the App Store...
LiveContainer
LiveContainer 一个无需实际安装即可运行iOS应用的启动器！ Crowdin 项目： | 文档：liveconainer.github.io LiveContainer LiveContainer 是一个应用启动器（非模拟器或虚拟机），允许你在其中运行 iOS 应用。 允许你仅用一个应用和一个 App ID 安装不限数量的应用（3 应用/10 应用 ID 的免费开发者账户限制不适用）。你还可以为同一应用安装多个版本，并使用多个数据容器。 （低于 iOS 26）当 JIT 可用时，完全绕过代码签名，安装前无需签名你的应用。否则，你的应用将使用与 LiveContainer...
CVE-2025-70600---Urve-Smart-Office---Stored-XSS-in-iOS-App
URVE Smart Office iOS — 通过磁贴HTML字段存储型XSS（PoC） 此仓库记录了一个概念验证（PoC） ，针对影响URVE Smart Office 的iOS移动应用 的存储型跨站脚本（XSS）漏洞 。 由于输入验证实现不足，攻击者控制的JavaScript可以被注入到磁贴的HTML字段 中。有效载荷被存储，并在受影响内容传递至移动客户端并在iOS设备上渲染时执行。 ⚠️ 法律免责声明 未经双方事先同意，使用此PoC攻击目标是违法的。 最终用户有责任遵守所有适用的地方、州和联邦法律。 作者和贡献者对任何滥用或造成的损害不承担责任。 CVE 详情 CVE ID:...
decrypted
decrypted Descifrador de FairPlay volcado de iPA para aplicaciones iOS que se ejecutan en macOS con SIP habilitado, usando CVE-2025-24204. Compatible con macOS 15.0-15.2 AÚN EN DESARROLLO Créditos CVE-2025-24204 Decryptor...
frida-ios-dump-modern
现代 iOS IPA 转储工具 一个为 Frida 17.5.2+ 打造的现代 iOS 应用内存解密工具，全面支持 iOS 14-16 及多种越狱环境。 状态：✅ 可正常工作且已测试 - 已使用 Frida 17.5.2 在以下设备上成功转储并解密 iOS 应用： iOS 14.7.1 + Taurine 越狱（iPad mini 5） iOS 16.7.12 + palera1n 越狱（iPhone 8） 功能特性 ✅ 兼容 Frida 17.5.2+（使用 NativePointer.readByteArray） ✅ 兼容 Taurine 越狱（iOS 14.7.1） ✅ 兼容...
Fleet: Unauthenticated download of in-house iOS app binaries via predictable URLs
Summary Two endpoints serving in-house iOS application packages and manifests in Fleet's enterprise tier are reachable without a hard-to-guess token in the URL, allowing an unauthenticated attacker who can reach the Fleet server to download an in-house IPA by guessing sequential title identifiers...
EUVD-2026-55632
Improper verification of cryptographic signature and Improper Check for Unusual or Exceptional Conditions vulnerability in Estonian Information System Authority RIA libdigidocpp, DigiDoc4, DigiDoc on Android, and DigiDoc on iOS. This issue affects libdigidocpp: from 4.1.0 before 4.2.1; DigiDoc4:...
CVE-2026-42566
The CVE affects Meshtastic firmware prior to 2.7.23.b246bcd where a single node advertising a User.long_name containing malformed UTF-8 over LoRa can render other radios unusable over BLE when managed via the iOS app. Root cause: a null terminator can be placed in the middle of a multibyte sequen...
XNUTest
xnutesting Research & Education Only — Proof-of-concept...
PT-2026-20524
ScadaApp for iOS 1.1.4.0 contains a denial of service vulnerability that allows attackers to crash the application by inputting an oversized buffer in the Servername field. Attackers can paste a 257-character buffer during login to trigger an application crash on iOS devices...
PT-2026-7469
Name of the Vulnerable Software and Affected Versions ZOLL ePCR IOS application affected versions not specified Description The application displays user-supplied data within a WebView without proper sanitization. Specifically, attacker-controlled strings entered into PCR fields such as run numbe...
CVE-2020-37087
Easy Transfer Wifi Transfer v1.7 for iOS contains a persistent cross-site scripting vulnerability that allows remote attackers to inject malicious scripts by manipulating the oldPath, newPath, and path parameters in Create Folder and Move/Edit functions. Attackers can exploit improper input...
PT-2026-5836
Easy Transfer 1.7 iOS mobile application contains a directory traversal vulnerability that allows remote attackers to access unauthorized file system paths without authentication. Attackers can exploit the vulnerability by manipulating path parameters in GET and POST requests to list or download...
CVE-2022-50952 Banco Guayaquil 8.0.0 Mobile iOS Cross-Site Scripting via Profile Name Input
Banco Guayaquil 8.0.0 mobile iOS application contains a persistent cross-site scripting vulnerability in the TextBox Name Profile input. Attackers can inject malicious script code through a POST request that executes on application review without user interaction...
CVE-2021-33981
An insecure, direct object vulnerability in hunting/fishing license retrieval function of the "Fish | Hunt FL" iOS app versions 3.8.0 and earlier allows a remote authenticated attacker to retrieve other people's personal information and images of their hunting/fishing licenses...
CVE-2025-14023
LINE client for iOS prior to 15.19 allows UI spoofing due to inconsistencies between the navigation state and the in-app browser's user interface, which could create confusion about the trust context of displayed pages or interactive elements under specific conditions...
PT-2025-49138
Name of the Vulnerable Software and Affected Versions AirKeyboard iOS App version 1.0.5 Description The AirKeyboard iOS App has a missing authentication mechanism. This allows unauthenticated attackers to send arbitrary keystrokes to a victim’s iOS device in real-time, without requiring user...
EUVD-2025-197765
Improper certificate validation vulnerability exists in 'デジラアプリ' App for iOS prior to ver.80.10.00. If this vulnerability is exploited, a man-in-the-middle attack may allow an attacker to eavesdrop on and/or tamper with an encrypted communication...
CVE-2025-5009 Information Disclosure in Gemini iOS App
In Gemini iOS, when a user shared a snippet of a conversation, it would share the entire conversation via a sharable public link that contained the entire conversation history and not just the snippet...