ipatool

ipatool은 App Store에서 iOS, iPadOS, tvOS, visionOS 및 macOS 앱을 검색하고 .ipa 또는 macOS .pkg 앱 패키지를 다운로드할 수 있게 해주는 명령줄 도구입니다. 요구 사항 지원되는 운영 체제macOS, Linux, Windows 또는 iOS. App Store를 사용하도록 이미 구성된 Apple 계정. 설치 Linux 및 Windows GitHub releases에서 최신 버전의 ipatool을 받을 수 있습니다. macOS Homebrew를 사용하여 ipatool을 설치할 수...

CVE-2026-101047 Fleet before 4.87.0 Unauthenticated iOS App Download via Predictable URLs

Fleet before 4.87.0 does not protect the two endpoints that serve in-house iOS application packages and manifests enterprise tier only with the intended random, time-limited URL token. Because Apple's InstallEnterpriseApplication MDM command requires these URLs to be reachable without a Fleet...

CVE-2026-101047 Fleet before 4.87.0 Unauthenticated iOS App Download via Predictable URLs

Fleet before 4.87.0 does not protect the two endpoints that serve in-house iOS application packages and manifests enterprise tier only with the intended random, time-limited URL token. Because Apple's InstallEnterpriseApplication MDM command requires these URLs to be reachable without a Fleet...

CVE-2026-101047 Fleet before 4.87.0 Unauthenticated iOS App Download via Predictable URLs

Fleet before 4.87.0 does not protect the two endpoints that serve in-house iOS application packages and manifests enterprise tier only with the intended random, time-limited URL token. Because Apple's InstallEnterpriseApplication MDM command requires these URLs to be reachable without a Fleet...

CVE-2026-101047

Fleet versions before 4.87.0 are vulnerable to an unauthenticated download of in-house iOS application packages and manifests. The root cause is the failure to implement intended random, time-limited URL tokens for specific endpoints required by Apple's InstallEnterpriseApplication MDM command. A...

PHOENIX CONTACT多款产品 数据伪造问题漏洞

PHOENIX CONTACT AXC F 1152, among others, are controller devices produced by the German company PHOENIX CONTACT. Several products from PHOENIX CONTACT have vulnerabilities related to data manipulation. These vulnerabilities stem from the lack of a data validation mechanism when allowing remote,...

EUVD-2014-6490

Malware in sbrugna...

CVE-2023-31225

The Gallery app has the risk of hijacking attacks. Successful exploitation of this vulnerability may cause download failures and affect product availability...

Widespread Use of Rafel RAT Puts 3.9 Billion Android Devices at Risk

The new Rafel RAT is an Android malware capable of stealing data, spy on you, and even lock your phone. Keep your Android updated, download apps safely, and avoid phishing attacks to stay secure...

MAL-2022-1840 Malicious code in cashapp-hakc-apk-app-donwload-2022 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 04eadcab52b9bac905ca7c27c7cd573703c8ca31b52ed9001fb658461021ad7d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in free-fire-hac-k-app-donwload-2022 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f143b51ad93c7a24477eb1822f30c5a56f7d6f26db23e1caee1dcdd2cb0e59a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3135 Malicious code in free-fire-hac-k-app-donwload-2022 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f143b51ad93c7a24477eb1822f30c5a56f7d6f26db23e1caee1dcdd2cb0e59a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3138 Malicious code in free-fire-skins-app-donwload-2022 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6bf81acb934f850daccf53c7825dfdb5995e138e649c43e895d52c199e443bb6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Zomato: Bypassing the SMS sending limit for download app link.

Summary: Here an attacker can send the download link sms to any number of people bypassing the sms rate limit imposed by zomato. Description: zomato provides an easy way for the users to download their app when they are at the home page of zomato's website. A user can send upto 15 sms to themself...

CVE-2018-14992

The ASUS ZenFone 3 Max Android device with a build fingerprint of asus/USPhone/ASUSX0081:7.0/NRD90M/USPhone-14.14.1711.92-20171208:user/release-keys contains a pre-installed platform app with a package name of com.asus.dm versionCode=1510500200, versionName=1.5.0.40171122 has an exposed interface...

Constructr CMS 3.03 Arbitrary File Upload

No description provided by source. !/usr/bin/env perl Constructr CMS 3.03 Arbitrary File Upload Author: plucky Email: [email protected] Vulnerable Page: /constructr/backend/media.php line App Download: http://sourceforge.net/projects/constructr/ Date: 23/03/2011 THX TO: yawn, shrod, h473 and...

Android Mobile Device App Download Detection (deprecated)

Binary data 6531.prm...

Constructr CMS 3.03 - Arbitrary File Upload

Constructr CMS 3.03 - Arbitrary File Upload !/usr/bin/env perl Constructr CMS 3.03 Arbitrary File Upload Author: plucky Email: [email protected] Vulnerable Page: /constructr/backend/media.php line App Download: http://sourceforge.net/projects/constructr/ Date: 23/03/2011 THX TO: yawn, shrod, h4...

Constructr CMS 3.03 Shell Upload

!/usr/bin/env perl Constructr CMS 3.03 Arbitrary File Upload Author: plucky Email: [email protected] Vulnerable Page: /constructr/backend/media.php line App Download: http://sourceforge.net/projects/constructr/ Date: 23/03/2011 THX TO: yawn, shrod, h473 and DoMinO use strict; use warnings; use...