42758 matches found
python-patrol
Python Patrol Scan for python installations on macOS, and run CVE-2015-20107.py script to report if patching is needed Several of these scripts need Full Disk Access permissions and must be run as root so it can scan the entire macOS filesystem except the areas restricted by macOS Make sure to ru...
WebcamViewer
Webcam Viewer Previews the connected webcam as a PoC of CVE-2021-30731. Must be running macOS 11.3.1 or lower or macOS 10.15 before Catalina Security Update 2021-004. Building 1. Install build prerequisites: brew install autoconf automake cmake libtool pkg-config 2. Build dependencies:...
CVE-2019-6207
CVE-2019-6207 getdirentriesattr kernel heap inofo leak this vulneriliabity can be tirgger at sandbox at macOS=10.14.4 &&ios 12.2 I will update more details about this vulneriliabity...
osx-re-101
osx & ios re 101 Work in progress as I am actively collecting these. Must read https://reverse.put.as/ https://blog.paloaltonetworks.com/tag/mac-os-x/ https://www.synack.com/blog/r-d-projects/os-x-security-research/ https://pewpewthespells.com/re.html https://github.com/bx/machO-tools...
CVE-2026-77156
Incomplete validation of extracted archive entry paths in ast-cli's tar extraction logic on Linux and macOS used when installing the Vorpal ASCA real-time engine and the SCA Resolver would allow a malicious tar archive containing absolute or traversal path entries to write files outside the insta...
duf
duf Disk Usage/Free Utility Linux, BSD, macOS & Windows Features User-friendly, colorful output Adjusts to your terminal's theme & width Sort the results according to your needs Groups & filters devices Can conveniently output JSON Installation Packages Linux Arch Linux: pacman -S duf Ubuntu 22.0...
thief_raccoon
Thief Raccoon - Login Phishing Tool Thief Raccoon is a tool designed for educational purposes to demonstrate how phishing attacks can be conducted on various operating systems. This tool is intended to raise awareness about cybersecurity threats and help users understand the importance of securit...
Forklift_LPE
Forklift 3.3.9 Local Privilege Escalation When installing the Forklift, a new helper called com.binarynights.ForkLiftHelper for Mac OS X is automatically installed to the /Library/PrivilegedHelperTools/ directory. Analyzing this helper, which handles XPC messages, resulted in different ways of...
CVE-2026-77156
The ast-cli tool is vulnerable to a path traversal flaw during tar extraction on Linux and macOS platforms. The root cause is incomplete validation of extracted archive entry paths, which can be exploited by a malicious archive containing absolute or traversal path entries to write files outside ...
EUVD-2026-108269
Incomplete validation of extracted archive entry paths in ast-cli's tar extraction logic on Linux and macOS used when installing the Vorpal ASCA real-time engine and the SCA Resolver would allow a malicious tar archive containing absolute or traversal path entries to write files outside the insta...
CVE-2026-77156 ast-cli: Path traversal in tar extraction on Linux/macOS allows writes outside the install directory
Incomplete validation of extracted archive entry paths in ast-cli's tar extraction logic on Linux and macOS used when installing the Vorpal ASCA real-time engine and the SCA Resolver would allow a malicious tar archive containing absolute or traversal path entries to write files outside the insta...
AirWatch
AirWatch What is AirWatch? AirWatch is a simple menu bar app which helps prevent device snatching attacks. As an example, such an attack was carried out against Ross Ulbricht. An agent grabbed his device and ran, thus preventing him from rebooting it. How does it work? AirWatch monitors the curre...
MacDirtyCow
MacDirtyCow Example of CVE-2022-46689 aka MacDirtyCow. What? MacDirtyCow is a privilege escalation vulnerability in macOS, similar to the Dirty COW vulnerability in Linux. The vulnerability resides in the copy-on-write COW mechanism used by macOS's XNU kernel. The vulnerability allows an attacker...
CVE-2018-4407-IOS
CVE-2018-4407-IOS CVE ? Common Vulnerabilities and Exposures TLDR The vulnerability is a heap buffer overflow in the networking code in the XNU operating system kernel. XNU is used by both iOS and macOS, which is why iPhones, iPads, and Macbooks are all affected. My exploit PoC just overwrites th...
CVE-2023-32407-a-macOS-TCC-bypass-in-Metal
CVE-2023-32407-a-macOS-TCC-bypass-in-Metal...
EUVD-2026-107392
Electron: Off-screen rendering on macOS trusts GPU-supplied frame geometry...
NPM: Electron: Off-screen rendering on macOS trusts GPU-supplied frame geometry
NPM: Electron: Off-screen rendering on macOS trusts GPU-supplied frame geometry vulnerability discovered by ? in WordPress npm electron versions 42.11.6...
ghidra_kernelcache
ghidrakernelcache: a Ghidra iOS kernelcache framework for reverse engineering This framework is the end product of my experience in Kernelcache reverse engineering , I usually look for vulnerabilities by manually auditing the kernel and its extensions and have automated most of the things that I...
CVE-2023-32413
macOS LPE CVE-2023-32413 / ZDI-23-845 / Pwn2Own Vancouver 2023 exploit This is the exploit code that has been played at Pwn2Own Vancouver 2023 https://youtu.be/c0cS4R0ja-I?t=180. This code exploits CVE-2023-32413 to gain root rights on any vulnerable macOS. The vulnerability is a logic TOCTOU tha...