ios-mac-app

适用于 iOS 和 macOS 的 Proton VPN 版权所有 c 2025 Proton Technologies AG 依赖项 本项目使用 Swift Package Manager 管理所有依赖。在运行任何目标之前，请允许 Xcode 解析包。 第三方依赖 ACKNOWLEDGEMENTS.md 设置 在您的机器上启用 Git LFS 克隆此仓库 确保您克隆子模块（git submodule init + git submodule update） 使用 brew bundle 安装 Homebrew 依赖 目前您需要使用 Xcode 14.x 使用付费的 Apple...

DylibHijackTest

DylibHijackTest 环境要求 安装 Python3 依赖：pip3 install -r requirements.txt 从源代码编译 dylib，因为不要相信来自 GitHub 的编译产物：gcc -dynamiclib DylibHijackTest.c -o DylibHijackTest.dylib 工作原理 ⚠️ 这会在你的机器上生成大量进程，请在虚拟机中运行 ：请务必格外小心！ inject.py 递归遍历文件夹，搜索带有 MHEXECUTE 头部的 Mach-O 二进制文件 使用指向我们恶意 dylib 的 DYLDINSERTLIBRARIES 环境变量启动...

CVE-2020-9934

CVE-2020-9934 このProof of ConceptはシンプルなSwiftプログラムで、自身とターミナルにすべてのkTCCServiceエンタイトルメント（tccdから取得）を付与し、以下の4つの操作を実行します： TCC保護ディレクトリ内に "" という名前のファイルを作成する TCC保護ディレクトリ内からそのファイルのデータを読み取る TCCディレクトリ内のすべてのファイルを一覧表示する（"" を含む） TCC保護ディレクトリからファイルを削除する 使用法： ./bypasstc 詳細な記事はMediumでご覧ください。...

appledb_rs

Apple 产物数据库 用于按平台/版本存储 Apple 内部各种信息的服务器。 存储的产物： 可执行文件 Entitlements 框架 设备 版本 主要特性： 通过 API 调用、CLI 或 WebUI 提供完整访问 设计为易于扩展 可在完全离线环境中运行！ 安装 更完善的文档可此处查看。 服务器配置 更完善的文档可此处查看。 API 文档 运行服务器时，公共路由和管理员路由均可使用 Swagger 文档： 公共路由路径：/api/v1/swagger/ 管理员路由路径：/api/admin/swagger/ 实用提示 开发 更完善的文档可此处查看。 用法 更完善的文档可此处查看。...

CVE-2026-75030: Missing Authorization

Missing Authorization vulnerability in Apache Syncope. An administrator with task execution entitlements might be able to mass deprovision group members, regardless of their group-related administration capabilities. This issue affects Apache Syncope: from 3.0.0-M0 through 3.0.16, from 4.0.0-M0...

CVE-2026-63071

Improper Isolation or Compartmentalization vulnerability in Apache Syncope. An administrator with adequate entitlements for Implementations can create a malicious Groovy class containing untrusted code bypassing the Groovy security sandbox. This issue affects Apache Syncope: from 3.0.0-M0 through...

CVE-2026-62183

Improper Privilege Management vulnerability in Apache Syncope. When: the all-Java user workflow adapter is configured, or the Flowable user workflow adapter is configured, bearing a BPMN definition not requiring admin approval for user self registration of self update requests the following...

CVE-2026-63071 Apache Syncope: RCE via Groovy Sandbox bypass

Improper Isolation or Compartmentalization vulnerability in Apache Syncope. An administrator with adequate entitlements for Implementations can create a malicious Groovy class containing untrusted code bypassing the Groovy security sandbox. This issue affects Apache Syncope: from 3.0.0-M0 through...

CVE-2026-63071

Apache Syncope is vulnerable to an Improper Isolation or Compartmentalization flaw due to a bypass in the Groovy security sandbox (specifically the GroovySandboxScriptEngineImpl in the core/spring module). An administrator with entitlements to manage Implementations can create a malicious Groovy ...

CVE-2026-63071

Improper Isolation or Compartmentalization vulnerability in Apache Syncope. An administrator with adequate entitlements for Implementations can create a malicious Groovy class containing untrusted code bypassing the Groovy security sandbox. This issue affects Apache Syncope: from 3.0.0-M0 through...

CVE-2026-62183: Improper Privilege Management

Improper Privilege Management vulnerability in Apache Syncope. When: the all-Java user workflow adapter is configured, or the Flowable user workflow adapter is configured, bearing a BPMN definition not requiring admin approval for user self registration of self update requests the following...

PT-2026-61610

Name of the Vulnerable Software and Affected Versions Apache Syncope versions 3.0.0-M0 through 3.0.16 Apache Syncope versions 4.0.0-M0 through 4.0.6 Apache Syncope versions 4.1.0-M0 through 4.1.1 Description Improper isolation or compartmentalization allows an administrator with entitlements for...

Exploit for Race Condition in Apple Ipados

CVE-2026-28992 — IOHIDFamily FastPathUserClient PoC Security...

Identity Lifecycle Management Wasn't Built for AI Agents 

Identity lifecycle management was architected around a person with an employment record, a manager, and a departure date. AI agents have none of those. As autonomous principals proliferate across enterprise environments, the governance model built for humans develops structural blind spots that...

CVE-2026-42890

Actual is an open-source personal finance application. In the macOS desktop application version 25.x built on Electron 39.2.7, the ELECTRONRUNASNODE fuse is not disabled, allowing an attacker who can place a file on disk or control command-line arguments to invoke the signed Actual.app binary wit...

CVE-2026-24064

Waves Central for macOS versions 13.0.9 through 16.5.5 contain a local privilege escalation vulnerability. A trusted XPC client component included with the product is signed with hardened runtime entitlements that permit dynamic library injection. A local attacker can set the DYLDINSERTLIBRARIES...

actual Allows Electron to Run As Node

Summary A electron run as node vulnerability was identified in actual macOS application, version 25.x Electron 39.2.7. Vulnerability Type: Electron Run As Node Description ELECTRONRUNASNODE fuse enabled Electron 39.2.7 — app can be converted to Node.js REPL for arbitrary code execution Impact An...

PT-2026-47558

Summary A electron run as node vulnerability was identified in actual macOS application, version 25.x Electron 39.2.7. Vulnerability Type: Electron Run As Node Description ELECTRON RUN AS NODE fuse enabled Electron 39.2.7 — app can be converted to Node.js REPL for arbitrary code execution Impact ...

PT-2026-47599

Name of the Vulnerable Software and Affected Versions Actual versions prior to 26.5.0 Description In the macOS desktop application, the ELECTRON RUN AS NODE fuse is not disabled. This allows an attacker who can place a file on disk or control command-line arguments to invoke the signed Actual.app...

The Role of Domain-Specific Features in Malware Detection: A MacOS Case Study

Despite the growing popularity of macOS among end users and enterprise systems, malware research has primarily focused on Windows and Android operating systems, leaving the problem of macOS malware detection relatively unexplored. Indeed, the specificity of the operating system and the unique...