42801 matches found
aftermath
Acerca de Aftermath es un framework de respuesta a incidentes de código abierto basado en Swift. Aftermath puede ser utilizado por defensores para recolectar y posteriormente analizar los datos del host comprometido. Aftermath puede ser desplegado desde un MDM idealmente, pero también puede...
CVE-2026-108721: Improper Handling of Case Sensitivity
Open Computer Use through 1.0.0 on macOS contains an improper case sensitivity handling vulnerability that allows local MCP callers to bypass the password-manager denylist using case-variant bundle identifiers. Attackers, including prompt-injected model turns, can pass identifiers like...
PT-2026-110124
Name of the Vulnerable Software and Affected Versions Open Computer Use versions prior to 1.0.1 Description Improper case sensitivity handling allows local MCP callers to bypass the password-manager denylist by using case-variant bundle identifiers. This enables attackers, including those using...
Exploit for Path Traversal in Apple Macos
A public, source-guided analysis of CVE-2026-84568 and CVE-2026...
ssl-kill-switch2
SSL Kill Switch 2 Strumento blackbox per disabilitare la validazione dei certificati SSL/TLS - inclusa la pinning dei certificati - all'interno di applicazioni iOS e macOS. Seconda iterazione di https://github.com/iSECPartners/ios-ssl-kill-switch . Descrizione Una volta caricato in un'applicazion...
macos_app_structure
Introduzione a macOS - Struttura delle app macOS Passare a macOS da Linux o Windows può sembrare come camminare in una terra nuova e sconosciuta. Dato che Linux è open-source e Windows è ben documentato e molto popolare e macOS non è né l'uno né l'altro, per l'esattezza, macOS può essere...
dwarf2json
Einleitung dwarf2json ist ein Go-Programm, das Dateien mit Symbol- und Typinformationen verarbeitet, um Volatility3 Intermediate Symbol File ISF JSON-Ausgabe für die Linux- und macOS-Analyse zu erzeugen. Zum Erstellen Go 1.18+ erforderlich: $ go build Zum Ausführen: $ ./dwarf2json --help Usage:...
Wireshark 1.12.x < 1.12.1 Multiple Vulnerabilities (macOS)
The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 1.12.1. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.12.1 advisory. - The SnifferDecompress function in wiretap/ngsniffer.c in the DOS Sniffer file parser in Wireshark...
hooky
hooky Questo repository è un sottomodulo per https://github.com/markuta/CVE-2024-32002, che contiene un semplice hook situato in y/hooks/post-checkout per aprire la calcolatrice sui sistemi macOS: open -a Calculator.app Maggiori informazioni sulla vulnerabilità sono disponibili qui e qui...
CVE-2026-96396
The Affinity by Canva application for macOS before 3.3.1 October 2026 release did not safely calculate the size of an image buffer when generating QuickLook thumbnails and previews of Affinity document files, leading to an integer overflow and a heap-based buffer overflow. A threat actor could...
CVE-2026-96394
The Affinity by Canva application for macOS before 3.3.1 October 2026 release did not validate image dimensions against the size of the pixel data when generating QuickLook thumbnails and previews of Affinity document files, leading to an out-of-bounds heap read. A threat actor could craft an...
CVE-2026-96395
The Affinity by Canva app for macOS before 3.3.1 October 2026 release did not perform adequate bounds checking when generating QuickLook thumbnails and previews of Affinity document files, leading to an out-of-bounds heap read. A threat actor could craft an Affinity document that, when displayed ...
CVE-2026-96396
The Affinity by Canva application for macOS before 3.3.1 October 2026 release did not safely calculate the size of an image buffer when generating QuickLook thumbnails and previews of Affinity document files, leading to an integer overflow and a heap-based buffer overflow. A threat actor could...
CVE-2026-96396
The Affinity by Canva application for macOS versions prior to 3.3.1 (October 2026 release) is vulnerable to an integer overflow leading to a heap-based buffer overflow . The flaw occurs because the application does not safely calculate the size of an image buffer when generating QuickLook thumbna...
EUVD-2026-95751
The Affinity by Canva application for macOS before 3.3.1 October 2026 release did not safely calculate the size of an image buffer when generating QuickLook thumbnails and previews of Affinity document files, leading to an integer overflow and a heap-based buffer overflow. A threat actor could...
EUVD-2026-95750
The Affinity by Canva app for macOS before 3.3.1 October 2026 release did not perform adequate bounds checking when generating QuickLook thumbnails and previews of Affinity document files, leading to an out-of-bounds heap read. A threat actor could craft an Affinity document that, when displayed ...
CVE-2026-96395
The Affinity by Canva app for macOS before 3.3.1 October 2026 release did not perform adequate bounds checking when generating QuickLook thumbnails and previews of Affinity document files, leading to an out-of-bounds heap read. A threat actor could craft an Affinity document that, when displayed ...
CVE-2026-96395
The Affinity by Canva app for macOS (versions prior to 3.3.1 ) is vulnerable to a heap memory disclosure due to an unchecked palette index in the QuickLook extensions . This flaw occurs because the application fails to perform adequate bounds checking when generating QuickLook thumbnails and prev...
EUVD-2026-95749
The Affinity by Canva application for macOS before 3.3.1 October 2026 release did not validate image dimensions against the size of the pixel data when generating QuickLook thumbnails and previews of Affinity document files, leading to an out-of-bounds heap read. A threat actor could craft an...
CVE-2026-96394
The Affinity by Canva application for macOS versions prior to 3.3.1 (October 2026 release) is vulnerable to an out-of-bounds heap read (CWE-126). The root cause is a failure to validate image dimensions against the size of pixel data when generating QuickLook thumbnails and previews of Affinity d...