CVE-2018-4121

CVE-2018-4121 - Safari Wasm Sections POC RCE Exploit von MWR Labs c 2018 Details Dieser Proof-of-Concept-Exploit zielt nur auf Safari 11.0.3 13604.5.6 unter macOS 10.13.3 17D47 ab. Kompiliere das gewünschte Payload als dylib mit einem Konstruktor Führe python filetojsarray.py your.dylib payload.j...

wBlock

wBlock La fine delle stronzate del blocco pubblicità su Safari Un blocco contenuti per Safari su macOS, iOS e iPadOS. 750.000 regole in 5 estensioni, archiviazione con Protocol Buffer, compressione LZ4 e sincronizzazione iCloud. !NOTE Cerchi un confronto dettagliato? Dai un'occhiata alla mia guid...

CVE-2017-7089

CVE-2017-7089 Impatto : L'elaborazione di contenuti web creati con intenti dannosi può portare a universal cross-site scripting Descrizione : Esisteva un problema logico nella gestione della scheda principale. Questo problema è stato risolto con una migliore gestione dello stato. Safari 10 Bypass...

CVE-2022-22629

CVE-2022-22629 Prova di concetto Questo post riguarda la PoC per il bug WebGL che è stato corretto negli aggiornamenti di sicurezza di Safari 15.4. Se vuoi imparare in dettaglio come funziona WebGL, puoi usare questa risorsa ufficiale, dato che qui discuteremo i dettagli specifici del bug:...

CVE-2026-43670

A Content Security Policy bypass was addressed with improved enforcement in AudioWorklet contexts. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5. Processing maliciously crafted web content may bypass Content Security Policy...

CVE-2026-43670

A Content Security Policy bypass was addressed with improved enforcement in AudioWorklet contexts. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5. Processing maliciously crafted web content may bypass Content Security Policy...

CVE-2026-43670

CVE-2026-43670 is a Content Security Policy (CSP) bypass in WebKit's AudioWorklet context , fixed in Safari 26.5 , iOS 18.7.9 / iPadOS 18.7.9 , iOS 26.5 / iPadOS 26.5 , and macOS Tahoe 26.5 . Processing maliciously crafted web content may allow an attacker to circumvent CSP, potentially enabling ...

CVE-2025-14174-analysis

Analisi di CVE-2025-14174: Scrittura fuori dai limiti dello Staging Buffer Metal di ANGLE Analisi tecnica e proof-of-concept per CVE-2025-14174...

Astra Linux – Vulnerability in WebKit2GTK

This issue has been resolved through improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6, iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, and watchOS 11.6. Processing maliciously crafted web content may lead to an unexpected Safari crash...

browser-pwn

Browser-Pwn Il mondo dei browser è dominato da 4 attori principali: Chromium/Chrome Blink-Engine Firefox Gecko-Engine Safari WebKit-Engine Edge Blink-Engine in precedenza EdgeHTML-Engine Quanto segue è suddiviso in due parti: Informazioni che aiutano a comprendere la loro architettura e...

Ios-Safari-Mallicous-Extension-Example

Ios-Safari-Mallicous-Extension-Example Esempio su come effettuare l'iniezione attualmente in lavorazione di un keylogger js tramite l'estensione Safari quella parte è già fatta...

vulnerabilities in Apple macOS

Apple has identified vulnerabilities in macOS Tahoe 26.6.2. These vulnerabilities relate to various aspects of memory management, input validation, and state management within Apple’s operating systems and Safari browser. Some of these vulnerabilities allow malicious actors to cause memory...

Linux Distros Unpatched Vulnerability : CVE-2026-64719

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in Safari 26.6, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPad...

Linux Distros Unpatched Vulnerability : CVE-2026-64783

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, visionOS...

Linux Distros Unpatched Vulnerability : CVE-2026-64757

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A memory corruption issue was addressed with improved state management. This issue is fixed in Safari 26.6, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS...

Linux Distros Unpatched Vulnerability : CVE-2026-28984

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5 and iPadOS 26.5, macOS Tahoe...

Linux Distros Unpatched Vulnerability : CVE-2026-64713

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - This issue was addressed with improved checks. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS...

Linux Distros Unpatched Vulnerability : CVE-2026-64730

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The issue was addressed with improved UI. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6...

Linux Distros Unpatched Vulnerability : CVE-2026-64728

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A permissions issue was addressed with improved validation. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS...

Linux Distros Unpatched Vulnerability : CVE-2026-64787

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.6.1, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2...