71 matches found
MSF-screenrecord-on-MacOS
MSF-screenrecord-on-MacOS !!! Questa vulnerabilità è stata scoperta o rilevata simultaneamente da Sudhakar Muthumani di Primefort Private Limited, Khiem Tran ed è stata registrata come CVE-2022-22600. Questo nonostante io abbia già contattato Apple via email nel 2021. Versioni interessate Da...
POC
POC Solo a scopo di ricerca! Una raccolta pubblica di POC & Exploit per le vulnerabilità che ho scoperto. CVE-2022-22583 PackageKit : Un'applicazione potrebbe essere in grado di accedere a file riservati SIP Bypass CVE-2022-26690 PackageKit : Un'applicazione dannosa potrebbe essere in grado di...
CVE-2025-24204
CVE-2025-24204 Informazioni CVE-2025-24204 è una vulnerabilità che consente di leggere la memoria di qualsiasi processo su sistemi macOS con SIP attivo. La causa principale di questa vulnerabilità deriva dall'aggiunta di un'entitlement eccessivamente potente com.apple.system-task-ports.read al...
CVE-2023-38571-a-macOS-TCC-bypass-in-Music-and-TV
Riepilogo esecutivo macOS Music e TV eseguono un rename insicuro che porta a FDA ottenendo il pieno controllo sul TCC.db dell'utente Ho segnalato questo bug in ticket separati per ciascuna app, sentitevi liberi di unirli se applicabile. Il problema di fondo è che queste app hanno FDA ma non...
CVE-2022-26726-POC
CVE-2022-26726 Versioni Affette Come studente, ho accesso limitato ai dispositivi su cui posso testare questa vulnerabilità. Le versioni che ho testato finora sono MacOS 12.3.1, MacOS 12.3, MacOS 12.0, MacOS 10.15.7, e MacOS 11.6.1. La vulnerabilità funziona su tutte le versioni testate. Allora...
CVE-2023-32407-a-macOS-TCC-bypass-in-Metal
CVE-2023-32407-a-macOS-TCC-bypass-in-Metal...
CVE-2023-26818
Aviso Legal Este exploit foi criado unicamente para fins de pesquisa e para o desenvolvimento de técnicas defensivas eficazes. Não se destina a ser utilizado para quaisquer atividades maliciosas ou não autorizadas. O autor e o proprietário do script eximem-se de qualquer responsabilidade ou...
CVE-2020-9934
CVE-2020-9934 यह प्रूफ ऑफ कॉन्सेप्ट एक सरल Swift प्रोग्राम है जो स्वयं और टर्मिनल को हर kTCCService एंटाइटलमेंट tccd से प्राप्त देगा और फिर चार काम करेगा: TCC-संरक्षित निर्देशिका में "" नामक एक फ़ाइल बनाएगा TCC-संरक्षित निर्देशिका के अंदर से उस फ़ाइल का डेटा पढ़ेगा TCC-निर्देशिका में सभी फ़ाइलों ...
hm-surf
Valutatore HM-Surf Valuta la suscettibilità dei browser macOS comuni a CVE-2024-44133. Contiene anche l'HTML che acquisisce uno screenshot e lo scarica insieme all'estrazione della posizione. Utilizzo - valutatore Per eseguire il valutatore, che verifica CVE-2024-44133 su tutti i browser macOS...
CVE-2023-32422-a-macOS-TCC-bypass-in-sqlite
CVE-2023-32422-um-macOS-TCC-bypass-em-sqlite...
CVE-2026-39309
CVE-2026-39309 affects Trilium Notes before v0.102.2. The Electron configuration allows a RunAsNode fuse to launch the app in a special Node.js mode (-e) that can execute arbitrary commands with Trilium’s permissions, enabling a local attacker to spoof macOS TCC prompts. An attacker could trigger...
EUVD-2026-31008
Trilium Notes is a cross-platform, hierarchical note taking application focused on building large personal knowledge bases. In versions 0.102.1 and prior, the Electron configuration is vulnerable to TCC Bypass via Prompt Spoofing, allowing local attackers to trigger misleading macOS permission...
CVE-2026-39309
Trilium Notes is a cross-platform, hierarchical note taking application focused on building large personal knowledge bases. In versions 0.102.1 and prior, the Electron configuration is vulnerable to TCC Bypass via Prompt Spoofing, allowing local attackers to trigger misleading macOS permission...
CVE-2025-15523 TCC Bypass via Inherited Permissions in Bundled Interpreter in Inkscape.app
MacOS version of Inkscape bundles a Python interpreter that inherits the Transparency, Consent, and Control TCC permissions granted by the user to the main application bundle. An attacker with local user access can invoke this interpreter with arbitrary commands or scripts, leveraging the...
CVE-2025-1398
Mattermost Desktop App versions =5.10.0 explicitly declared unnecessary macOS entitlements which allows an attacker with remote access to bypass Transparency, Consent, and Control TCC via code injection...
CVE-2025-64723 Arduino IDE for macOS has TCC Bypass via Dynamic Library Injection
Arduino IDE is an integrated development environment. Prior to version 2.3.7, Arduino IDE for macOS was configured with overly permissive security entitlements that could bypass macOS Hardened Runtime protections. This configuration allows attackers to inject malicious dynamic libraries into the...
CVE-2025-64723 Arduino IDE for macOS has TCC Bypass via Dynamic Library Injection
Arduino IDE is an integrated development environment. Prior to version 2.3.7, Arduino IDE for macOS was configured with overly permissive security entitlements that could bypass macOS Hardened Runtime protections. This configuration allows attackers to inject malicious dynamic libraries into the...
Libre Office TCC Bypass via Bundled Interpreter vulnerability (Dec 2025) - Mac OS X
Libre Office is prone to a tcc bypass via bundled interpreter vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2025-14714 TCC Bypass via Inherited Permissions in Bundled Interpreter
An Authentication Bypass vulnerability existed where the application bundled an interpreter Python that inherits the Transparency, Consent, and Control TCC permissions granted by the user to the main application bundle By executing the bundled interpreter directly the attacker's scripts run with...