ServiceCheater

ServiceCheater Poc of CVE-2020-0113 & CVE-2020-0108 Androidフォアグラウンドサービス権限昇格の脆弱性分析 脆弱性の背景...

Android-Disassembler

Android-Disassembler CodeFactor 휴대폰에서 악성 앱 분석 유지 관리 상태 유지 관리는 재개되었지만, 프로젝트는 여전히 복구 및 현대화 단계에 있습니다. 이제 기본값은 빌드 전에 초기화된 git 서브모듈을 필요로 합니다. 기본 열기/가져오기/내보내기 흐름은 최신 Android에서 SAF 우선 계약을 사용합니다. 고급 가져오기는 루트, 원시 파일 시스템 및 설치된 앱 탐색을 위한 별도의 고급 사용자 경로입니다. QUERYALLPACKAGES는 기본 SAF 흐름이 아닌 고급 사용자용 설치 앱 소스에 유지됩니...

CVE-2021-33699_Task_Hijacking

CVE-2021-33699TaskHijacking これは何ですか？ 攻撃者アプリと被害者アプリは、CVE-2021-33699Task Hijacking 脆弱性を練習するためのものです。 参考 https://naro-security.tistory.com/55...

CVE-2026-86911

This issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. A malicious app may be able to bypass clickjacking protections for secure prompts...

CVE-2026-65381

A validation issue existed in the entitlement verification. This issue was addressed with improved validation of the process entitlement. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A malicious app may be able to break out of its sandbox...

EUVD-2026-77936

A race condition was addressed with improved locking. This issue is fixed in macOS Tahoe 26.6. A malicious app may be able to gain root privileges...

CVE-2026-84586

CVE-2026-84586 is an information disclosure flaw in the Apple Account component, addressed with improved state management . A malicious application may be able to leak sensitive user information from macOS or watchOS. The issue affects macOS Golden Gate 27 (MacBook Neo 2026, MacBook Air/Pro with ...

CVE-2026-65354

CVE-2026-65354 is a permissions issue in Apple's iOS 27, iPadOS 27, and macOS Golden Gate 27 that allows a malicious app to break out of its sandbox . The vulnerability was addressed with additional restrictions. The CVSS 3.1 score is 8.2 (HIGH) with a local attack vector, low complexity, and req...

CVE-2026-65381

CVE-2026-65381 affects AppleMobileFileIntegrity and CoreTypes components in macOS. The root cause is a validation issue in entitlement verification , addressed by improved validation of the process entitlement. The impact is that a malicious app may break out of its sandbox , potentially gaining ...

CVE-2026-86911

CVE-2026-86911 is a clickjacking protection bypass in macOS Golden Gate 27 that can allow a malicious app to bypass secure prompt protections. The root cause is an improper state management issue, addressed with improved state management in the same release. The CVSS v3.1 base score is 5.5 (Mediu...

CVE-2026-86911

This issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. A malicious app may be able to bypass clickjacking protections for secure prompts...

EUVD-2026-77986

This issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. A malicious app may be able to bypass clickjacking protections for secure prompts...

CVE-2026-43689

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. A malicious app may be able to gain root privileges...

CVE-2026-43689

CVE-2026-43689 is a permissions issue in Apple's operating systems, resolved by adding additional restrictions. A malicious app may be able to gain root privileges , representing a significant local privilege escalation. The issue affects iOS 26.7, iPadOS 26.7, iOS 27, iPadOS 27, macOS Golden Gat...

Astra Linux – Vulnerability in WebKit2GTK

A logic issue has been resolved through improved restrictions. This issue is fixed in tvOS 14.6, iOS 14.6, iPadOS 14.6, Safari 14.1.1, macOS Big Sur 11.4, and watchOS 7.5. A malicious application may be able to leak sensitive user information...

Astra Linux – Vulnerability in Chromium

Before version 90.0.4430.212, using “after free” in Google Chrome’s payments functionality allowed an attacker who convinced a user to install a malicious payment app to potentially exploit heap corruption through a crafted HTML page...

CVE-2026-43657

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.5 and iPadOS 26.5. A malicious app may be able to enumerate installed apps...

CVE-2026-43657

Apple addressed a permissions issue in iOS 26.5 and iPadOS 26.5 that allowed a malicious app to enumerate installed apps on the device. The fix introduces additional restrictions to limit the information a third-party app can discover about other installed applications. The issue carries a CVSS 3...

CVE-2026-43657

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.5 and iPadOS 26.5. A malicious app may be able to enumerate installed apps...

Astra Linux – Vulnerability in Chromium

Insufficient policy enforcement in Android intents in Google Chrome prior to 92.0.4515.107 allowed an attacker who convinced a user to install a malicious application to obtain potentially sensitive information via a crafted HTML page...