42 matches found
EUVD-2026-78129
This issue was addressed through improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27. A malicious website may be able to determine what apps a user has installed...
CVE-2026-84518
CVE-2026-84518 is an information disclosure vulnerability in Apple products affecting Safari, iOS, iPadOS, and macOS . The root cause is a flaw in state management , which allowed a malicious website to determine which apps a user has installed. The issue was addressed through improved state mana...
CVE-2026-64761
CVE-2026-64761 is a privacy vulnerability in iOS and iPadOS prior to version 27. The root cause involves improper handling of user preferences , which allowed an app to potentially identify what other apps a user has installed. This constitutes a privacy leak rather than a traditional code-execut...
AppEnumGuard
AppEnumGuard AppEnumGuard 是针对已安装应用枚举侧信道（跟踪编号为 CVE-2025-31207 ）的防御性调整。它支持 iOS 15.0–18.4.1 上的常规 rootless 和 rootHide 越狱环境。 该仓库还包含一个普通的沙盒化 iOS 测试应用，用于演示漏洞结果并验证缓解措施。 CVE-2025-31207 CVE-2025-31207 是 Apple FrontBoard 应用启动逻辑中的一个信息泄露漏洞。沙盒化应用可以通过私有的 SpringBoardServices 启动函数提交任意 bundle...
AppEnumFix
用于修补 CVE-2025-31207 的越狱插件，该漏洞允许沙盒应用枚举用户已安装的应用。 Apple 已在 iOS 18.5 中修补 22F5053j / iOS 18.5 Beta 3 diff...
CVE-2021-521-Exploit
CVE-2021-521-Exploit Exploit de laboratorio CVE-2021-521: la app usa reflexión de Java para acceder a componentes del sistema Android, obteniendo una lista de todas las apps instaladas. La reflexión accede a ApplicationPackageManager y PackageManagerService, explotando la vulnerabilidad...
ios-nehelper-enum-apps-0day
nehelper 枚举已安装应用 0-day（iOS 15.0） 我已更新此代码，以避免直接使用私有 API。更多内容请阅读我的博客文章。但这也意味着该代码现在与 iOS 版本相关，甚至可能与设备型号相关。因此，如果你的设备上无法运行，请重新计算并更新 c.c 文件中的偏移量。原始代码可在 direct 分支中找到。 该漏洞允许任何用户安装的应用，在知道某个应用的 bundle ID 的情况下，判断该应用是否已安装到设备上。 XPC 端点 "com.apple.nehelper" 有一个任何应用都可访问的方法，该方法接受 bundle ID 作为参数，如果设备上安装了匹配该 bundle...
AppEnumGuard v1.2
AppEnumGuard AppEnumGuard is a defensive rootHide tweak for the installed-application enumeration side channel tracked as CVE-2025-31207. It is designed for the Relaxin jailbreak on iOS 17.0–17.3.1 , using Relaxin's rootHide architecture. The repository also contains a normal sandboxed iOS test...
CVE-2026-43657
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.5 and iPadOS 26.5. A malicious app may be able to enumerate installed apps...
CVE-2026-43657
Apple addressed a permissions issue in iOS 26.5 and iPadOS 26.5 that allowed a malicious app to enumerate installed apps on the device. The fix introduces additional restrictions to limit the information a third-party app can discover about other installed applications. The issue carries a CVSS 3...
CVE-2026-43657
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.5 and iPadOS 26.5. A malicious app may be able to enumerate installed apps...
CVE-2026-56300 Capgo - Unauthenticated API Key Validity and Permission Oracle via RPC Functions
Capgo before 12.128.2 contains unauthenticated security definer RPC functions getuserid and getorgpermforapikey that expose API key validity oracles and user UUID disclosure. Unauthenticated attackers using the public API key can validate leaked keys, enumerate users and apps, and determine...
CVE-2026-56337 Capgo - Information Disclosure via Unauthenticated RPC Function exist_app_v2
Capgo before 12.128.2 contains an information disclosure vulnerability in the public.existappv2 RPC function that allows unauthenticated attackers to enumerate appids by calling POST /rest/v1/rpc/existappv2 with arbitrary appid parameters. Remote attackers can exploit this SECURITY DEFINER functi...
CVE-2026-56337
Capgo before 12.128.2 contains an information disclosure vulnerability in the public.existappv2 RPC function that allows unauthenticated attackers to enumerate appids by calling POST /rest/v1/rpc/existappv2 with arbitrary appid parameters. Remote attackers can exploit this SECURITY DEFINER functi...
CVE-2026-56319
CVE-2026-56319 affects Capgo prior to 12.128.2. The issue is an information disclosure in GET /statistics/app/:app_id that lets app-limited API keys distinguish existing sibling app IDs by observing differential error responses (500 PGRST116 for inaccessible apps vs 401 for nonexistent apps), bre...
PT-2026-51149
Name of the Vulnerable Software and Affected Versions capgo versions prior to 12.128.2 Description An authorization bypass exists in several Supabase PostgREST RPC functions: get app metrics, get global metrics, and get total metrics. These functions are granted to the anon role without enforcing...
CVE-2026-28882
This issue was addressed with improved checks. This issue is fixed in iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, tvOS 26.4, visionOS 26.4, watchOS 26.4. An app may be able to enumerate a user's installed apps...
PT-2026-7791
Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.3 iPadOS versions prior to 26.3 iOS versions prior to 18.7.5 iPadOS versions prior to 18.7.5 Description An application may be capable of listing the applications installed on a user's device. The issue was addressed b...
Apple iOS和Apple iPadOS 安全漏洞
Apple iOS and Apple iPadOS are products of the American company Apple. Apple iOS is an operating system developed for mobile devices. Apple iPadOS is an operating system for iPad tablets. Both Apple iOS and Apple iPadOS have security vulnerabilities, which stem from improper log cleanup. These...