ios-mac-app

Proton VPN for iOS, macOS and tvOS Copyright c 2025 Proton Technologies AG Dependencies This project uses Swift Package Manager for all of it's dependencies. Allow Xcode to resolve packages before running any target. Third-party dependencies Resolved versions are recorded in...

appledb_rs

Apple artifacts database Server storing various information about Apple internals on a per platform/version basis. Stored artifacts: Executables Entitlements Frameworks Devices Versions Main features: Full access via API calls, CLI or WebUI Designed to be easily extensible Works in full offline...

CVE-2020-9934

CVE-2020-9934 This Proof of Concept is a simple Swift program that will give itself and Terminal every kTCCService entitlement pulled from tccd and then do four things: Create a file named "" in the TCC-protected directory Read the data from said file from within the TCC-protected directory List...

DylibHijackTest

DylibHijackTest Requirements Install Python3 requirements: pip3 install -r requirements.txt Compile dylib from source because don't trust compiled things from GitHub: gcc -dynamiclib DylibHijackTest.c -o DylibHijackTest.dylib How it Works ⚠️ This will spawn many processes on your machine, run this...

PT-2026-146031

A missing authorization check has been found in ConsumerResource.setupOwner function of consumer registration module in the Candlepin package. The registration method checks permission to create a consumer only when the caller is a user. A consumer that authenticates with its identity certificate...

CVE-2026-93325

Buildx bake requires the user to grant entitlements with --allow or an interactive prompt before a build reaches outside the working directory. Under --progress=rawjson that consent step is skipped...

CVE-2026-121541 Bake filesystem path entitlements approval can be skipped in some multi-target builds

In Docker Buildx versions v0.19.0 through v0.38.0, an untrusted Bake definition that builds multiple targets together may expose files accessible to the Buildx client without the expected fs.read approval. Under certain conditions, filesystem paths from some targets are not verified against the...

CVE-2026-121541 Bake filesystem path entitlements approval can be skipped in some multi-target builds

In Docker Buildx versions v0.19.0 through v0.38.0, an untrusted Bake definition that builds multiple targets together may expose files accessible to the Buildx client without the expected fs.read approval. Under certain conditions, filesystem paths from some targets are not verified against the...

CVE-2026-121541

In Docker Buildx versions v0.19.0 through v0.38.0 , an untrusted Bake definition building multiple targets can expose files to the Buildx client without required fs.read approval. The root cause is that filesystem paths from certain targets are not consistently verified against approved entitleme...

CVE-2026-121542

In Docker Buildx versions v0.19.0 through v0.38.0 , a flaw allows untrusted Bake definitions to bypass filesystem entitlement checks. Specifically, paths under the same parent directory as the current working directory that use the working directory's basename as a prefix can expose files to the ...

CVE-2026-121542 Bake filesystem path entitlements approval can be skipped for path using basename prefix

In Docker Buildx versions v0.19.0 through v0.38.0, an untrusted Bake definition may expose files accessible to the Buildx client without the expected fs.read approval. Under certain conditions, paths under the same parent directory as the current working directory whose names use the working...

CVE-2026-121542 Bake filesystem path entitlements approval can be skipped for path using basename prefix

In Docker Buildx versions v0.19.0 through v0.38.0, an untrusted Bake definition may expose files accessible to the Buildx client without the expected fs.read approval. Under certain conditions, paths under the same parent directory as the current working directory whose names use the working...

DEBIAN-CVE-2026-93325

Buildx bake requires the user to grant entitlements with --allow or an interactive prompt before a build reaches outside the working directory. Under --progress=rawjson that consent step is skipped...

CVE-2026-93325

Buildx bake requires the user to grant entitlements with --allow or an interactive prompt before a build reaches outside the working directory. Under --progress=rawjson that consent step is skipped...

CVE-2026-113687

Apache Syncope is impacted by an improper isolation or compartmentalization vulnerability. An administrator with sufficient permissions for Implementations can create a malicious Groovy class to execute untrusted code on a separate thread, effectively bypassing the Groovy security sandbox . This ...

CVE-2026-113687 Apache Syncope: RCE via ProcessGroovyMethodsSandbox bypass

Improper isolation or compartmentalization vulnerability in Apache Syncope. An administrator with adequate entitlements for Implementations can create a malicious Groovy class running untrusted code on a separate Thread, thus bypassing the Groovy security sandbox. This issue affects Apache Syncop...

CVE-2026-86935

This issue was addressed by removing additional entitlements. This issue is fixed in macOS Golden Gate 27. An app may be able to access user-sensitive data...

CVE-2026-86935

This issue was addressed by removing additional entitlements. This issue is fixed in macOS Golden Gate 27. An app may be able to access user-sensitive data...

CVE-2026-86935

Apple macOS Golden Gate versions prior to version 27 are vulnerable to an issue involving improper configuration of additional authorizations (entitlements). This flaw could allow an application to gain unauthorized access to user-sensitive data . The issue was addressed in macOS Golden Gate 27 b...

PT-2026-115327

Name of the Vulnerable Software and Affected Versions Docker affected versions not specified Description A failure in the Docker Buildx filesystem entitlements protection mechanism allows for remote code execution. Recommendations At the moment, there is no information about a newer version that...