1070 matches found
ServiceCheater
ServiceCheater Poc of CVE-2020-0113 & CVE-2020-0108 Androidใใฉใขใฐใฉใฆใณใใตใผใในๆจฉ้ๆๆ ผใฎ่ๅผฑๆงๅๆ ่ๅผฑๆงใฎ่ๆฏ...
Android-Disassembler
Android-Disassembler CodeFactor ํด๋ํฐ์์ ์ ์ฑ ์ฑ ๋ถ์ ์ ์ง ๊ด๋ฆฌ ์ํ ์ ์ง ๊ด๋ฆฌ๋ ์ฌ๊ฐ๋์์ง๋ง, ํ๋ก์ ํธ๋ ์ฌ์ ํ ๋ณต๊ตฌ ๋ฐ ํ๋ํ ๋จ๊ณ์ ์์ต๋๋ค. ์ด์ ๊ธฐ๋ณธ๊ฐ์ ๋น๋ ์ ์ ์ด๊ธฐํ๋ git ์๋ธ๋ชจ๋์ ํ์๋ก ํฉ๋๋ค. ๊ธฐ๋ณธ ์ด๊ธฐ/๊ฐ์ ธ์ค๊ธฐ/๋ด๋ณด๋ด๊ธฐ ํ๋ฆ์ ์ต์ Android์์ SAF ์ฐ์ ๊ณ์ฝ์ ์ฌ์ฉํฉ๋๋ค. ๊ณ ๊ธ ๊ฐ์ ธ์ค๊ธฐ๋ ๋ฃจํธ, ์์ ํ์ผ ์์คํ ๋ฐ ์ค์น๋ ์ฑ ํ์์ ์ํ ๋ณ๋์ ๊ณ ๊ธ ์ฌ์ฉ์ ๊ฒฝ๋ก์ ๋๋ค. QUERYALLPACKAGES๋ ๊ธฐ๋ณธ SAF ํ๋ฆ์ด ์๋ ๊ณ ๊ธ ์ฌ์ฉ์์ฉ ์ค์น ์ฑ ์์ค์ ์ ์ง๋ฉ๋...
CVE-2021-33699_Task_Hijacking
CVE-2021-33699TaskHijacking ใใใฏไฝใงใใ๏ผ ๆปๆ่ ใขใใชใจ่ขซๅฎณ่ ใขใใชใฏใCVE-2021-33699Task Hijacking ่ๅผฑๆงใ็ทด็ฟใใใใใฎใใฎใงใใ ๅ่ https://naro-security.tistory.com/55...
CVE-2026-86911
This issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. A malicious app may be able to bypass clickjacking protections for secure prompts...
CVE-2026-65381
A validation issue existed in the entitlement verification. This issue was addressed with improved validation of the process entitlement. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A malicious app may be able to break out of its sandbox...
EUVD-2026-77936
A race condition was addressed with improved locking. This issue is fixed in macOS Tahoe 26.6. A malicious app may be able to gain root privileges...
CVE-2026-84586
CVE-2026-84586 is an information disclosure flaw in the Apple Account component, addressed with improved state management . A malicious application may be able to leak sensitive user information from macOS or watchOS. The issue affects macOS Golden Gate 27 (MacBook Neo 2026, MacBook Air/Pro with ...
CVE-2026-65354
CVE-2026-65354 is a permissions issue in Apple's iOS 27, iPadOS 27, and macOS Golden Gate 27 that allows a malicious app to break out of its sandbox . The vulnerability was addressed with additional restrictions. The CVSS 3.1 score is 8.2 (HIGH) with a local attack vector, low complexity, and req...
CVE-2026-65381
CVE-2026-65381 affects AppleMobileFileIntegrity and CoreTypes components in macOS. The root cause is a validation issue in entitlement verification , addressed by improved validation of the process entitlement. The impact is that a malicious app may break out of its sandbox , potentially gaining ...
CVE-2026-86911
CVE-2026-86911 is a clickjacking protection bypass in macOS Golden Gate 27 that can allow a malicious app to bypass secure prompt protections. The root cause is an improper state management issue, addressed with improved state management in the same release. The CVSS v3.1 base score is 5.5 (Mediu...
CVE-2026-86911
This issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. A malicious app may be able to bypass clickjacking protections for secure prompts...
EUVD-2026-77986
This issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. A malicious app may be able to bypass clickjacking protections for secure prompts...
CVE-2026-43689
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. A malicious app may be able to gain root privileges...
CVE-2026-43689
CVE-2026-43689 is a permissions issue in Apple's operating systems, resolved by adding additional restrictions. A malicious app may be able to gain root privileges , representing a significant local privilege escalation. The issue affects iOS 26.7, iPadOS 26.7, iOS 27, iPadOS 27, macOS Golden Gat...
Astra Linux โ Vulnerability in WebKit2GTK
A logic issue has been resolved through improved restrictions. This issue is fixed in tvOS 14.6, iOS 14.6, iPadOS 14.6, Safari 14.1.1, macOS Big Sur 11.4, and watchOS 7.5. A malicious application may be able to leak sensitive user information...
Astra Linux โ Vulnerability in Chromium
Before version 90.0.4430.212, using โafter freeโ in Google Chromeโs payments functionality allowed an attacker who convinced a user to install a malicious payment app to potentially exploit heap corruption through a crafted HTML page...
CVE-2026-43657
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.5 and iPadOS 26.5. A malicious app may be able to enumerate installed apps...
CVE-2026-43657
Apple addressed a permissions issue in iOS 26.5 and iPadOS 26.5 that allowed a malicious app to enumerate installed apps on the device. The fix introduces additional restrictions to limit the information a third-party app can discover about other installed applications. The issue carries a CVSS 3...
CVE-2026-43657
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.5 and iPadOS 26.5. A malicious app may be able to enumerate installed apps...
Astra Linux โ Vulnerability in Chromium
Insufficient policy enforcement in Android intents in Google Chrome prior to 92.0.4515.107 allowed an attacker who convinced a user to install a malicious application to obtain potentially sensitive information via a crafted HTML page...