122 matches found
CVE-2023-32364-macos-app-sandbox-escape
CVE-2023-32364-macos-app-sandbox-escape Exploit for CVE-2023-32364...
LiveContainer
LiveContainer ¡Un lanzador de aplicaciones que ejecuta apps de iOS sin instalarlas realmente! Proyecto Crowdin: | Documentación:liveconainer.github.io LiveContainer LiveContainer es un lanzador de aplicaciones no un emulador ni un hipervisor que te permite ejecutar aplicaciones de iOS dentro de é...
appsandbox
App Sandbox App Sandbox is a virtual machine app for Windows and macOS that's focused on performance and ease of use. Windows features: Works on Windows 11 Home or Pro, without Hyper-V Windows 11 or Ubuntu 26.04 LTS VM Support Zero touch install Copy and Paste 2 Channel Audio GPU Acceleration via...
Mythic-Macro-Generator
Mythic-Macro-Generator Script en Python3 para generar macros de MS Office que lanzan payloads JXA de Mythic. Este script genera una macro de Office que usa osascript para descargar y ejecutar el payload JXA .js de Mythic. Pasos: 1. Configura el servidor C2 de Mythic y genera un payload "apfell" j...
macos_sandbox
Introduction to macOS - the App sandbox Continuing with my transition to macOS blogpost series, I'd like to discuss a bit about the macOS App sandbox. It is highly recommended to read the macOS App structure blogpost first - I will be assuming the reader knows the difference between Apps, process...
CVE-2026-64760
An information leakage was addressed with additional validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10. An app may be able to leak sensitive kernel state...
CVE-2026-21053
Improper input validation in Samsung Email prior to version 6.2.13.1 allows local attackers to create arbitrary files within the application sandbox...
CVE-2025-43524
CVE-2025-43524 is a local sandbox escape in macOS components. The issue is described as an access problem that could allow an app to break out of its sandbox. Public entries confirm fixes in macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, and macOS Tahoe 26.2. The associated advisories consistently fl...
CVE-2026-XNU-AIO-KEVENT-UAF
XNU AIO Kevent Use-After-Free CVE-2026-XXXX Kernel panic...
CVE-2026-26228
VideoLAN VLC for Android prior to version 3.7.0 contains a path traversal vulnerability in the Remote Access Server routing for the authenticated endpoint GET /download. The file query parameter is concatenated into a filesystem path under the configured download directory without canonicalizatio...
EUVD-2025-206273
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26.2. An app may be able to access protected files within an App Sandbox container...
CVE-2025-46297
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26.2. An app may be able to access protected files within an App Sandbox container...
CVE-2025-46297
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26.2. An app may be able to access protected files within an App Sandbox container...
CVE-2025-46297
CVE-2025-46297 describes a permissions issue in macOS Tahoe up to 26.1 that could allow an app to access protected files inside an App Sandbox container. The Red Hat and EUVD entries reiterate the same underlying problem. Apple’s security content indicates the fix is in macOS Tahoe 26.2, addressi...
CVE-2025-46297
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Tahoe 26.2. An app may be able to access protected files within an App Sandbox container...
PT-2025-54487
Name of the Vulnerable Software and Affected Versions macOS versions prior to Tahoe 26.2 Description A permissions issue existed where an application could potentially access protected files within an App Sandbox container. This issue was addressed with additional restrictions. Recommendations...
About the security content of macOS Tahoe 26.2
About the security content of macOS Tahoe 26.2 This document describes the security content of macOS Tahoe 26.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...
EUVD-2015-3829
Malware in sbrugna...