darling

Darling Darling is a runtime environment for macOS applications. Please note that most GUI applications will not run at the moment. Download Packages for some distributions are available for download under releases. Build Instructions For build instructions, visit Darling Docs. Prefixes Darling h...

ios-mac-app

适用于 iOS 和 macOS 的 Proton VPN 版权所有 c 2025 Proton Technologies AG 依赖项 本项目使用 Swift Package Manager 管理所有依赖。在运行任何目标之前，请允许 Xcode 解析包。 第三方依赖 ACKNOWLEDGEMENTS.md 设置 在您的机器上启用 Git LFS 克隆此仓库 确保您克隆子模块（git submodule init + git submodule update） 使用 brew bundle 安装 Homebrew 依赖 目前您需要使用 Xcode 14.x 使用付费的 Apple...

ios-malicious-bithunter

iOS Malicious Bit Hunter Abstract iOS Malicious Bit Hunter is a malicious plug-in detection engine for iOS applications. It can analyze the head of the macho file of the injected dylib dynamic library based on runtime, and can perform behavior analysis through interface input characteristics to...

sdks

theos/sdks このリポジトリには、プライベートシンボルを含むパッチ適用済みのiOS SDKが含まれています。これらはXcode 7.3およびiOS 9.3 SDK以降、公式SDKから削除されました。 Theosで使用するには、このリポジトリをダウンロードし、展開して、必要なSDKを$THEOS/sdks/にコピーしてください。 createpatchedsdk.shとinoahdevのtbd v2.2を使用し、iOS Device Supportディレクトリから取得したバイナリ、またはIPSWから抽出したバイナリを使用して生成されています。...

XcInspector

XcInspector：用于 Xcode 项目安全 XcInspector 是一个 macOS 应用和命令行工具， 用于扫描 Xcode 项目文件以发现可能的安全问题。 GitLab 上的源代码仓库 计划检查项（规则）列表 为什么？ Xcode 项目在某些情况下可能被用来危害安全与 隐私。 项目中可以嵌入任意脚本， 这些脚本可能被设置为在特定操作发生时自动运行 （例如常见的“Build”命令）。 脚本可能引用项目目录之外的路径。 可执行文件/脚本/库可以被包含在项目归档中。 本工具旨在尝试（而非保证）捕获 Xcode 项目中的 一些已知风险。 注意： XcInspector...

CVE-2024-23298.app

CVE-2024-23298 の PoC Xcode 15.2 を開いて、このプロジェクトをクローンするだけです。...

CVE-2026-65393

A permissions issue was addressed with improved validation. This issue is fixed in Xcode 27, macOS Golden Gate 27. An app may be able to access user-sensitive data...

CVE-2026-65393

A permissions issue was addressed with improved validation. This issue is fixed in Xcode 27, macOS Golden Gate 27. An app may be able to access user-sensitive data...

CVE-2026-65393

A permissions issue was addressed with improved validation. This issue is fixed in Xcode 27, macOS Golden Gate 27. An app may be able to access user-sensitive data...

EUVD-2026-78118

A permissions issue was addressed with improved validation. This issue is fixed in Xcode 27, macOS Golden Gate 27. An app may be able to access user-sensitive data...

CVE-2026-65393

A permissions issue in the Xcode IDE (available for macOS Tahoe 26.6 and later) was addressed with improved validation. This vulnerability could allow an app to access user-sensitive data . The issue is fixed in Xcode 27 and macOS Golden Gate 27 . No specific exploit details or in-the-wild exploi...

CVE-2026-65393: Incorrect Authorization

A permissions issue was addressed with improved validation. This issue is fixed in Xcode 27, macOS Golden Gate 27. An app may be able to access user-sensitive data...

About the security content of Xcode 27

About the security content of Xcode 27 This document describes the security content of Xcode 27. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recen...

PT-2026-91547

Name of the Vulnerable Software and Affected Versions Xcode versions prior to 27 macOS Golden Gate versions prior to 27 Description A permissions issue exists where improved validation was required to prevent unauthorized access. This flaw could allow an application to access user-sensitive data...

CVE-2026-7416

A vulnerability was found in PolarVista xcode-mcp-server 1.0.0. This issue affects the function buildproject/runtests of the file src/index.ts of the component MCP Interface. The manipulation of the argument Request results in os command injection. The attack may be launched remotely. The exploit...

CVE-2026-7416

A vulnerability was found in PolarVista xcode-mcp-server 1.0.0. This issue affects the function buildproject/runtests of the file src/index.ts of the component MCP Interface. The manipulation of the argument Request results in os command injection. The attack may be launched remotely. The exploit...

CVE-2026-7416

A vulnerability was found in PolarVista xcode-mcp-server 1.0.0. This issue affects the function buildproject/runtests of the file src/index.ts of the component MCP Interface. The manipulation of the argument Request results in os command injection. The attack may be launched remotely. The exploit...

CVE-2026-7416 PolarVista xcode-mcp-server MCP index.ts run_tests os command injection

A vulnerability was found in PolarVista xcode-mcp-server 1.0.0. This issue affects the function buildproject/runtests of the file src/index.ts of the component MCP Interface. The manipulation of the argument Request results in os command injection. The attack may be launched remotely. The exploit...

CVE-2026-7416 PolarVista xcode-mcp-server MCP index.ts run_tests os command injection

A vulnerability was found in PolarVista xcode-mcp-server 1.0.0. This issue affects the function buildproject/runtests of the file src/index.ts of the component MCP Interface. The manipulation of the argument Request results in os command injection. The attack may be launched remotely. The exploit...

CVE-2026-7416

Summary: CVE-2026-7416 affects PolarVista xcode-mcp-server 1.0.0, specifically the MCP Interface’s build_project/run_tests in src/index.ts. The vulnerability arises from manipulating the Request argument, enabling an OS command injection. The advisory notes remote feasibility and public disclosur...