283 matches found
LiveContainer
LiveContainer iOSアプリを実際にインストールせずに実行できるアプリランチャーです！ Crowdinプロジェクト: | ドキュメント:liveconainer.github.io LiveContainer LiveContainer はアプリランチャー（エミュレータやハイパーバイザではありません）で、その内部で iOS アプリを実行できます。...
ipatool
ipatool is a command line tool that allows you to search for iOS, iPadOS, tvOS, visionOS, and macOS apps on the App Store, and download .ipa or macOS .pkg app packages. Requirements A supported operating system macOS, Linux, Windows or iOS. An Apple Account already configured to use the App Store...
CVE-2025-70600---Urve-Smart-Office---Stored-XSS-in-iOS-App
URVE Smart Office iOS — 通过磁贴HTML字段存储型XSS（PoC） 此仓库记录了一个概念验证（PoC） ，针对影响URVE Smart Office 的iOS移动应用 的存储型跨站脚本（XSS）漏洞 。 由于输入验证实现不足，攻击者控制的JavaScript可以被注入到磁贴的HTML字段 中。有效载荷被存储，并在受影响内容传递至移动客户端并在iOS设备上渲染时执行。 ⚠️ 法律免责声明 未经双方事先同意，使用此PoC攻击目标是违法的。 最终用户有责任遵守所有适用的地方、州和联邦法律。 作者和贡献者对任何滥用或造成的损害不承担责任。 CVE 详情 CVE ID:...
decrypted
decrypted FairPlay デクリプタ（iPA ダンプ） - SIP が有効な macOS 上で動作する iOS アプリケーション向け。CVE-2025-24204 を使用。macOS 15.0-15.2 対応 まだ開発中 クレジット CVE-2025-24204 Decryptor...
frida-ios-dump-modern
Dumper moderno de IPA para iOS Una herramienta moderna de descifrado de memoria de aplicaciones iOS, creada para Frida 17.5.2+ con soporte completo para iOS 14-16 y múltiples jailbreaks. Estado: ✅ Funcionando y probado - Volca y descifra aplicaciones iOS con Frida 17.5.2 en: iOS 14.7.1 + jailbrea...
Fleet: Unauthenticated download of in-house iOS app binaries via predictable URLs
Summary Two endpoints serving in-house iOS application packages and manifests in Fleet's enterprise tier are reachable without a hard-to-guess token in the URL, allowing an unauthenticated attacker who can reach the Fleet server to download an in-house IPA by guessing sequential title identifiers...
EUVD-2026-55632
Improper verification of cryptographic signature and Improper Check for Unusual or Exceptional Conditions vulnerability in Estonian Information System Authority RIA libdigidocpp, DigiDoc4, DigiDoc on Android, and DigiDoc on iOS. This issue affects libdigidocpp: from 4.1.0 before 4.2.1; DigiDoc4:...
CVE-2026-42566
The CVE affects Meshtastic firmware prior to 2.7.23.b246bcd where a single node advertising a User.long_name containing malformed UTF-8 over LoRa can render other radios unusable over BLE when managed via the iOS app. Root cause: a null terminator can be placed in the middle of a multibyte sequen...
XNUTest
xnutesting Research & Education Only — Proof-of-concept...
PT-2026-20524
ScadaApp for iOS 1.1.4.0 contains a denial of service vulnerability that allows attackers to crash the application by inputting an oversized buffer in the Servername field. Attackers can paste a 257-character buffer during login to trigger an application crash on iOS devices...
PT-2026-7469
Name of the Vulnerable Software and Affected Versions ZOLL ePCR IOS application affected versions not specified Description The application displays user-supplied data within a WebView without proper sanitization. Specifically, attacker-controlled strings entered into PCR fields such as run numbe...
CVE-2020-37087
Easy Transfer Wifi Transfer v1.7 for iOS contains a persistent cross-site scripting vulnerability that allows remote attackers to inject malicious scripts by manipulating the oldPath, newPath, and path parameters in Create Folder and Move/Edit functions. Attackers can exploit improper input...
PT-2026-5836
Easy Transfer 1.7 iOS mobile application contains a directory traversal vulnerability that allows remote attackers to access unauthorized file system paths without authentication. Attackers can exploit the vulnerability by manipulating path parameters in GET and POST requests to list or download...
CVE-2022-50952 Banco Guayaquil 8.0.0 Mobile iOS Cross-Site Scripting via Profile Name Input
Banco Guayaquil 8.0.0 mobile iOS application contains a persistent cross-site scripting vulnerability in the TextBox Name Profile input. Attackers can inject malicious script code through a POST request that executes on application review without user interaction...
CVE-2021-33981
An insecure, direct object vulnerability in hunting/fishing license retrieval function of the "Fish | Hunt FL" iOS app versions 3.8.0 and earlier allows a remote authenticated attacker to retrieve other people's personal information and images of their hunting/fishing licenses...
CVE-2025-14023
LINE client for iOS prior to 15.19 allows UI spoofing due to inconsistencies between the navigation state and the in-app browser's user interface, which could create confusion about the trust context of displayed pages or interactive elements under specific conditions...
PT-2025-49138
Name of the Vulnerable Software and Affected Versions AirKeyboard iOS App version 1.0.5 Description The AirKeyboard iOS App has a missing authentication mechanism. This allows unauthenticated attackers to send arbitrary keystrokes to a victim’s iOS device in real-time, without requiring user...
EUVD-2025-197765
Improper certificate validation vulnerability exists in 'デジラアプリ' App for iOS prior to ver.80.10.00. If this vulnerability is exploited, a man-in-the-middle attack may allow an attacker to eavesdrop on and/or tamper with an encrypted communication...
CVE-2025-5009 Information Disclosure in Gemini iOS App
In Gemini iOS, when a user shared a snippet of a conversation, it would share the entire conversation via a sharable public link that contained the entire conversation history and not just the snippet...