75 matches found
Fugu15
Fugu15 Fugu15 — это полу-отвязанный джейлбрейк с постоянной подписью для iOS 15. Он содержит обход проверки подписи кода, эксплойт ядра, обход PAC ядра и обход PPL. Кроме того, его можно установить через Safari, то есть компьютер не требуется, за исключением веб-сервера, который размещает Fugu15...
Loki
🧙♂️ Loki Command & Control Loki — это C2-фреймворк первой стадии stage-1, написанный на Node.js, созданный для script-jacking’а уязвимых Electron-приложений MITRE ATT&CK T1218.015. Разработанный для red team-операций, Loki позволяет обходить защитное ПО и обходить контроль приложений за счёт...
Time-of-check Time-of-use (TOCTOU) Race Condition
Overview electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Time-of-check Time-of-use TOCTOU Race Condition via the parent process code-sign verification on macOS. An attacker can...
Time-of-check Time-of-use (TOCTOU) Race Condition
Overview org.webjars.npm:electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Time-of-check Time-of-use TOCTOU Race Condition via the parent process code-sign verification on macOS. An...
CVE-2026-43813
A validation issue was addressed with improved input sanitization. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. A maliciously crafted app may be able to bypass code signing enforcement...
CVE-2026-43813
A validation issue in the CloudAttestation security mechanism (specifically in CloudAttestation.dylib) allows a maliciously crafted app to bypass code signing enforcement . The root cause is that the PCC.ComputeNodeValidator.policy.getter reads the com.apple.CloudAttestation.environment byte from...
CVE-2026-43813
A validation issue was addressed with improved input sanitization. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. A maliciously crafted app may be able to bypass code signing enforcement...
CVE-2026-47122
Sparkle is a software update framework for macOS. In versions up to and including 2.9.1, Autoupdate/AppInstaller.m's shouldAcceptNewConnection: only enforces SUCodeSigningVerifier validateConnection: before stage 1 completes. After performedStage1Installation = YES, new connections to the...
CVE-2026-47122 Sparkle's AppInstaller post-stage-1 XPC listener accepts unvalidated connections, allowing spoofed appcast item data injection
Sparkle is a software update framework for macOS. In versions up to and including 2.9.1, Autoupdate/AppInstaller.m's shouldAcceptNewConnection: only enforces SUCodeSigningVerifier validateConnection: before stage 1 completes. After performedStage1Installation = YES, new connections to the...
CVE-2026-47122 Sparkle's AppInstaller post-stage-1 XPC listener accepts unvalidated connections, allowing spoofed appcast item data injection
Sparkle is a software update framework for macOS. In versions up to and including 2.9.1, Autoupdate/AppInstaller.m's shouldAcceptNewConnection: only enforces SUCodeSigningVerifier validateConnection: before stage 1 completes. After performedStage1Installation = YES, new connections to the...
Sparkle's AppInstaller post-stage-1 XPC listener accepts unvalidated connections, allowing spoofed appcast item data injection
Summary AppInstaller post-stage-1 XPC listener accepts unvalidated connections, allowing spoofed appcast item data injection. Details Autoupdate/AppInstaller.m's shouldAcceptNewConnection: only enforces SUCodeSigningVerifier validateConnection: before stage 1 completes. After...
PT-2026-45020
Name of the Vulnerable Software and Affected Versions Sparkle versions 2.x through 2.9.1 Description In the Autoupdate/AppInstaller.m file, the shouldAcceptNewConnection: function only enforces SUCodeSigningVerifier validateConnection: before the first stage of installation completes. Once...
CVE-2021-33592
NAVER Toolbar before 4.0.30.323 allows remote attackers to execute arbitrary code via a crafted upgrade.xml file. Special characters in filename parameter can be the cause of bypassing code signing check function...
📄 macOS 10.12.2 XNU Kernel Privilege Escalation
This proof of concept targets a race‑condition vulnerability in the XNU kernel affecting macOS/iOS. By forcing a use‑after‑free condition on kernel ports, the exploit manipulates freed memory through a controlled spray, allowing a user‑controlled replacement object. Successful exploitation yields...
EUVD-2015-3838
Malware in sbrugna...
EUVD-2018-4963
Malware in sbrugna...
EUVD-2018-2476
Malware in sbrugna...
EUVD-2014-4382
Malware in sbrugna...