ios-malicious-bithunter

iOS Malicious Bit Hunter Abstract iOS Malicious Bit Hunter is a malicious plug-in detection engine for iOS applications. It can analyze the head of the macho file of the injected dylib dynamic library based on runtime, and can perform behavior analysis through interface input characteristics to...

darling

Darling Darling is a runtime environment for macOS applications. Please note that most GUI applications will not run at the moment. Download Packages for some distributions are available for download under releases. Build Instructions For build instructions, visit Darling Docs. Prefixes Darling h...

sdks

theos/sdks This repository contains patched iOS SDKs containing private symbols. These were removed from official SDKs starting in Xcode 7.3 and the iOS 9.3 SDK. To use with Theos, download this repo, extract, and copy whichever SDKs you desire into $THEOS/sdks/. Generated using createpatchedsdk....

ios-mac-app

iOS 및 macOS용 Proton VPN Copyright c 2025 Proton Technologies AG 의존성 이 프로젝트는 모든 의존성에 Swift Package Manager를 사용합니다. 타깃을 실행하기 전에 Xcode가 패키지를 확인하도록 허용하십시오. 타사 의존성 ACKNOWLEDGEMENTS.md 설정 컴퓨터에서 Git LFS를 활성화하십시오. 이 저장소를 클론하십시오. 서브모듈을 클론했는지 확인하십시오 git submodule init + git submodule update. brew bundle로...

XcInspector

XcInspector: Xcode 프로젝트 보안을 위한 도구 XcInspector는 Xcode 프로젝트 파일에서 발생할 수 있는 보안 문제를 스캔하기 위한 macOS 앱이자 명령줄 도구입니다. GitLab의 소스 코드 저장소 계획된 검사규칙 목록 왜 필요한가? Xcode 프로젝트가 보안과 프라이버시를 침해하는 데 악용될 수 있는 몇 가지 방법이 있습니다. 프로젝트에 임의의 스크립트를 삽입할 수 있으며, 특정 작업예: 일반적인 “Build” 명령이 발생할 때 자동으로 실행되도록 설정할 수 있습니다. 스크립트가 프로젝트 디렉터리...

CVE-2024-23298.app

CVE-2024-23298 PoC Xcode 15.2를 열고 이 프로젝트를 클론하기만 하면 됩니다...

CVE-2026-65393

A permissions issue was addressed with improved validation. This issue is fixed in Xcode 27, macOS Golden Gate 27. An app may be able to access user-sensitive data...

CVE-2026-65393

A permissions issue was addressed with improved validation. This issue is fixed in Xcode 27, macOS Golden Gate 27. An app may be able to access user-sensitive data...

CVE-2026-65393

A permissions issue was addressed with improved validation. This issue is fixed in Xcode 27, macOS Golden Gate 27. An app may be able to access user-sensitive data...

CVE-2026-65393

A permissions issue in the Xcode IDE (available for macOS Tahoe 26.6 and later) was addressed with improved validation. This vulnerability could allow an app to access user-sensitive data . The issue is fixed in Xcode 27 and macOS Golden Gate 27 . No specific exploit details or in-the-wild exploi...

EUVD-2026-78118

A permissions issue was addressed with improved validation. This issue is fixed in Xcode 27, macOS Golden Gate 27. An app may be able to access user-sensitive data...

CVE-2026-65393: Incorrect Authorization

A permissions issue was addressed with improved validation. This issue is fixed in Xcode 27, macOS Golden Gate 27. An app may be able to access user-sensitive data...

PT-2026-91547

Name of the Vulnerable Software and Affected Versions Xcode versions prior to 27 macOS Golden Gate versions prior to 27 Description A permissions issue exists where improved validation was required to prevent unauthorized access. This flaw could allow an application to access user-sensitive data...

About the security content of Xcode 27

About the security content of Xcode 27 This document describes the security content of Xcode 27. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recen...

CVE-2026-7416

A vulnerability was found in PolarVista xcode-mcp-server 1.0.0. This issue affects the function buildproject/runtests of the file src/index.ts of the component MCP Interface. The manipulation of the argument Request results in os command injection. The attack may be launched remotely. The exploit...

CVE-2026-7416

A vulnerability was found in PolarVista xcode-mcp-server 1.0.0. This issue affects the function buildproject/runtests of the file src/index.ts of the component MCP Interface. The manipulation of the argument Request results in os command injection. The attack may be launched remotely. The exploit...

CVE-2026-7416

A vulnerability was found in PolarVista xcode-mcp-server 1.0.0. This issue affects the function buildproject/runtests of the file src/index.ts of the component MCP Interface. The manipulation of the argument Request results in os command injection. The attack may be launched remotely. The exploit...

CVE-2026-7416 PolarVista xcode-mcp-server MCP index.ts run_tests os command injection

A vulnerability was found in PolarVista xcode-mcp-server 1.0.0. This issue affects the function buildproject/runtests of the file src/index.ts of the component MCP Interface. The manipulation of the argument Request results in os command injection. The attack may be launched remotely. The exploit...

CVE-2026-7416 PolarVista xcode-mcp-server MCP index.ts run_tests os command injection

A vulnerability was found in PolarVista xcode-mcp-server 1.0.0. This issue affects the function buildproject/runtests of the file src/index.ts of the component MCP Interface. The manipulation of the argument Request results in os command injection. The attack may be launched remotely. The exploit...

CVE-2026-7416

Summary: CVE-2026-7416 affects PolarVista xcode-mcp-server 1.0.0, specifically the MCP Interface’s build_project/run_tests in src/index.ts. The vulnerability arises from manipulating the Request argument, enabling an OS command injection. The advisory notes remote feasibility and public disclosur...