CVE-2026-20660

CVE-2026-20660 PoC 捆绑包 本文件夹打包了一个独立的 PoC（概念验证），针对： CVE-2026-20660 通过 gzip FNAME 实现的 CFNetwork NSGZipDecoder 路径遍历 对启用自动打开功能的受影响 macOS Safari 的影响 1. 目录结构 server.py：主 PoC 服务器，支持可配置的遍历深度和目标文件名 serveroverwrite.py：专门写入 ../../pwn.sh 的变体 README.md：复现说明和操作日志 2. 前置条件 1. 目标为存在漏洞的 macOS Safari（早于 26.3 补丁线）。...

EUVD-2015-1415

Malware in sbrugna...

CVE-2025-27425

Scanning certain QR codes that included text with a website URL could allow the URL to be opened without presenting the user with a confirmation alert first This vulnerability affects Firefox for iOS 136...

PT-2025-9670

Name of the Vulnerable Software and Affected Versions Firefox for iOS versions prior to 136 Description A issue exists where scanning certain QR codes containing website URLs can lead to the URL being opened without a confirmation alert. Recommendations For Firefox for iOS versions prior to 136,...

Dridex Malware Now Attacking macOS Systems with Novel Infection Method

A variant of the infamous Dridex banking malware has set its sights on Apple's macOS operating system using a previously undocumented infection method, according to latest research. It has "adopted a new technique to deliver documents embedded with malicious macros to users without having to...

The vulnerability of LibreOffice and Apache OpenOffice office programs lies in their automatic opening of embedded content, which allows attackers to compromise the integrity, confidentiality, and accessibility of protected information.

The vulnerability of LibreOffice and Apache OpenOffice desktop software relates to the automatic opening of embedded content. Exploiting this vulnerability can allow a malicious actor to compromise the integrity, confidentiality, and accessibility of protected information...

chromium-browser: Settings allowed executable files to run immediately after download in unsepcified

Google Chrome before 44.0.2403.89 does not ensure that the auto-open list omits all dangerous file types, which makes it easier for remote attackers to execute arbitrary code by providing a crafted file and leveraging a user's previous "Always open files of this type" choice, related to...

Design/Logic Flaw

Google Chrome before 44.0.2403.89 does not ensure that the auto-open list omits all dangerous file types, which makes it easier for remote attackers to execute arbitrary code by providing a crafted file and leveraging a user's previous "Always open files of this type" choice, related to...

UBUNTU-CVE-2015-1274

Google Chrome before 44.0.2403.89 does not ensure that the auto-open list omits all dangerous file types, which makes it easier for remote attackers to execute arbitrary code by providing a crafted file and leveraging a user's previous "Always open files of this type" choice, related to...

CVE-2015-1274

Google Chrome before 44.0.2403.89 does not ensure that the auto-open list omits all dangerous file types, which makes it easier for remote attackers to execute arbitrary code by providing a crafted file and leveraging a user's previous "Always open files of this type" choice, related to...

Apple iTunes 8.1.1 - 'ITMS' Multiple Protocol Handler Buffer Overflow (Metasploit)

$Id: $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/projects/Framework/ require 'msf/core' class Metasploit3...

AGAIN: Tested on Windows 98 with 'free' Opera 5.02 Build 856a (No Java Runtime Environment installed)

Thursday, 19 April, 2001 There is an interesting oddity with the 'free' Opera 5.02 Build 856a No Java Runtime Environment installed on Windows 98 with downloading files. In particular .exe. While the array of file type associations and instructions what to do with them is wide, the instruction se...