CVE-2024-55503

CVE-2024-55503 Termius 应用 MacOS dylib 命令注入 描述 Termius v.9.9.0 之前版本中存在一个问题，允许本地攻击者通过精心构造的脚本向 DYLDINSERTLIBRARIES 组件执行任意代码。使用 dylib root@kitploit: DYLDINSERTLIBRARIES=exploitcombined.dylib /Applications/Termius.app/Contents/MacOS/Termius 复现 影响 命令执行（本地） 参考资料 CVE...

New ZuRu Malware Variant Targeting Developers via Trojanized Termius macOS App

Cybersecurity researchers have discovered new artifacts associated with an Apple macOS malware called ZuRu, which is known to propagate via trojanized versions of legitimate software. SentinelOne, in a new report shared with The Hacker News, said the malware has been observed masquerading as the...