cve-2019-6207

CVE-2019-6207 root@kitploit: $ clang exploit.c -o exploit $ ./exploit CVE-2019-6207 exploit to leak 4 bytes of arbitrary kernel memory Tested on MacOS 10.14.1, should works on: MacOS wop != NETRTDUMP2 int size = rtmsg2RTMGET, &info, NULL, w, credp; if w-wreq != NULL && w-wtmem != NULL struct...

CVE-2022-26717-Safari-WebGL-Exploit

Safari WebGL XFB उपयोग के बाद मुक्त भेद्यता root@kitploit: - CVE-2022-26717 श्रेय root@kitploit: - Jeonghoon Shin@singi21a of Theori पैच और अपडेट root@kitploit: - https://support.apple.com/en-us/HT213260...

sudo-cve-2019-18634

CVE-2019-18634 https://www.sudo.ws/alerts/pwfeedback.html https://nvd.nist.gov/vuln/detail/CVE-2019-18634 Apple Information Security के Joe Vennix को इस बग की खोज के लिए श्रेय।...

check_icmp_dos-CVE-2018-4407-

Principe Le principe est de rendre les autres champs du paquet "icmp" illégaux. Lors de l'analyse par le noyau macOS ou iPhone, la vérification de la taille n'est pas implémentée, ce qui provoque un crash. Appareils 1. Apple iOS 11 et versions antérieures : tous les appareils 2. Apple macOS High...

IPC-Memory-Mac-OSX-Exploit

IPC-Memory-Mac-OSX-Exploit Contournement de sécurité local IPC La communication inter-processus via la mémoire partagée est un concept où deux processus ou plus peuvent accéder à une mémoire commune. Et la communication se fait via cette mémoire partagée où les modifications apportées par un...

CVE-2019-6203-PoC

CVE-2019-6203-PoC सभी Apple डिवाइसों में एक PEAP बग है जो एक हमलावर को किसी भी Apple डिवाइस iOS, macOS या tvOS को एक दुर्भावनापूर्ण एक्सेस पॉइंट से जुड़ने के लिए मजबूर करने की अनुमति देता है। यह CVE-2019-6203 के लिए एक PoC है, जो iOS 12.2, macOS 10.14.4 पर काम करता है, Kali Linux पर परीक्षण किया...

CVE-2017-7520

creationtimestamp| type| source ---|---|--- 2026-09-01 20:02:52+00:00| seen| Telegram/tQYQZqhyuY0qEc0EIMW1bi06b2xW0YmxNUvpyPlREzxjSw 2026-09-02 01:03:29+00:00| seen| Telegram/tQYQZqhyuY0qEc0EIMW1bi06b2xW0YmxNUvpyPlREzxjSw...

uaf-2023-28205

CVE-2023-28205: ثغرة الاستخدام بعد التحرير في Apple WebKit يمكن استغلال هذه الثغرة عبر محتوى ويب مُصمم بشكل خبيث، مما يسمح للمهاجمين بتنفيذ تعليمات برمجية عشوائية. الوصف يُطلق الكود ثغرة الاستخدام بعد التحرير UAF عن طريق تأخير إضافة كائنات Map وDate، مما يسمح لجامع القمامة GC بتحريرها. قد يؤدي هذ...

CVE-2025-24271

CVE-2025-24271 ثغرة في AirPlay تكشف معلومات حساسة في أجهزة Apple [email protected] https://m10.com.mx/cve-2025-24271-vulnerabilidad-en-airplay-expone-informacion-sensible-en-dispositivos-apple/ أكدت Apple أن أنظمة التشغيل التالية معرضة للخطر: macOS Sequoia 15.4 macOS Sonoma 14.7.5 macOS...

lCTT-Apple-Silicon--Resonance-Vulnerability-CVE-2024-23296

CTT-Apple-Silicon--Resonance-Vulnerability-CVE-2024-23296 Apple Silicon उन आवृत्तियों पर चलता है जो 587 kHz के स्वर्ण अनुपात हार्मोनिक्स हैं: · प्रदर्शन कोर: 3.2 GHz = 587 kHz × 5451 ≈ φ⁸ × 1000 · दक्षता कोर: 2.0 GHz = 587 kHz × 3407 ≈ φ⁷ × 1000 · न्यूरल इंजन: 11.0 GHz = 587 kHz × 18739 ≈ φ¹⁰ ×...

librepods nightly-53679cc

!WARNING librepods.org is not an official website of the LibrePods project. It inaccurately claims to be the official website of the project by claiming copyrights and using the LibrePods logo in the footer. And at the same time, they say that the project is not affiliated with the LibrePods...

CVE-2019-8656

CVE-2019-8656 CVE-2019-8656 GateKeeper बाईपास https://www.fcvl.net/vulnerabilities/macosx-gatekeeper-bypass...

inputcontrol

inputcontrol تطبيق إثبات مفهوم سخيف لـ CVE-2023-28197، تم إرساله إلى Apple عند الإبلاغ. يتناسب هذا جيدًا مع منشور المدونة الخاص به، "CVE-2023-28197: inputcontrol"...

uaf-2023-28205

CVE-2023-28205: ثغرة الاستخدام بعد التحرير في Apple WebKit تؤثر هذه الثغرة على Apple WebKit ويمكن استغلالها عبر محتوى ويب مُصمم بشكل خبيث، مما قد يسمح بتنفيذ تعليمات برمجية عشوائية في سياق عملية WebKit. إصدار WebKit المتأثر الذي تم تحليله في هذا المستودع مبني على WebKit-613.1.17.1 سلالة PlayStati...

CVE-2026-82454

The Omnivore API packages/api before the fix in commit abf53d6 contains an authentication bypass in Apple sign-in token verification. The decodeAppleToken function extracted the 'alg' field from the attacker-supplied JWT header and passed it as the sole allowed algorithm to jwt.verify. Using...

CVE-2026-82454

CVE-2026-82454 is a CRITICAL authentication bypass in the Omnivore API (packages/api), affecting versions before android-0.227.0 . The decodeAppleToken function extracted the alg field from an attacker-supplied JWT header and passed it as the sole allowed algorithm to jwt.verify(). Because jsonwe...

CVE-2026-82454 Omnivore before android-0.227.0 Authentication Bypass via Apple Sign-in

The Omnivore API packages/api before the fix in commit abf53d6 contains an authentication bypass in Apple sign-in token verification. The decodeAppleToken function extracted the 'alg' field from the attacker-supplied JWT header and passed it as the sole allowed algorithm to jwt.verify. Using...

CVE-2026-82454 Omnivore before android-0.227.0 Authentication Bypass via Apple Sign-in

The Omnivore API packages/api before the fix in commit abf53d6 contains an authentication bypass in Apple sign-in token verification. The decodeAppleToken function extracted the 'alg' field from the attacker-supplied JWT header and passed it as the sole allowed algorithm to jwt.verify. Using...

EUVD-2026-68109

The Omnivore API packages/api before the fix in commit abf53d6 contains an authentication bypass in Apple sign-in token verification. The decodeAppleToken function extracted the 'alg' field from the attacker-supplied JWT header and passed it as the sole allowed algorithm to jwt.verify. Using...

PT-2026-83433

Name of the Vulnerable Software and Affected Versions Omnivore API packages/api versions prior to commit abf53d6 Description An authentication bypass exists in the Apple sign-in token verification process. The decodeAppleToken function extracts the alg field from the JWT header provided by the us...