283 matches found
frida-ios-dump-modern
Dumper moderno de IPA para iOS Una herramienta moderna de descifrado de memoria de aplicaciones iOS, creada para Frida 17.5.2+ con soporte completo para iOS 14-16 y múltiples jailbreaks. Estado: ✅ Funcionando y probado - Volca y descifra aplicaciones iOS con Frida 17.5.2 en: iOS 14.7.1 + jailbrea...
ipatool
ipatool is a command line tool that allows you to search for iOS, iPadOS, tvOS, visionOS, and macOS apps on the App Store, and download .ipa or macOS .pkg app packages. Requirements...
LiveContainer
LiveContainer 一个无需实际安装即可运行iOS应用的启动器！ Crowdin 项目： | 文档：liveconainer.github.io LiveContainer LiveContainer 是一个应用启动器（非模拟器或虚拟机），允许你在其中运行 iOS 应用。 允许你仅用一个应用和一个 App ID 安装不限数量的应用（3 应用/10 应用 ID 的免费开发者账户限制不适用）。你还可以为同一应用安装多个版本，并使用多个数据容器。 （低于 iOS 26）当 JIT 可用时，完全绕过代码签名，安装前无需签名你的应用。否则，你的应用将使用与 LiveContainer...
CVE-2025-70600---Urve-Smart-Office---Stored-XSS-in-iOS-App
URVE Smart Office iOS — Stored XSS via Tile HTML Field PoC This repository documents a proof-of-concept PoC for a stored cross-site scripting XSS vulnerability affecting the iOS mobile application of URVE Smart Office. Due to insufficiently implemented input validation, attacker-controlled...
decrypted
decrypted Descifrador de FairPlay volcado de iPA para aplicaciones iOS que se ejecutan en macOS con SIP habilitado, usando CVE-2025-24204. Compatible con macOS 15.0-15.2 AÚN EN DESARROLLO Créditos CVE-2025-24204 Decryptor...
Fleet: Unauthenticated download of in-house iOS app binaries via predictable URLs
Summary Two endpoints serving in-house iOS application packages and manifests in Fleet's enterprise tier are reachable without a hard-to-guess token in the URL, allowing an unauthenticated attacker who can reach the Fleet server to download an in-house IPA by guessing sequential title identifiers...
EUVD-2026-55632
Improper verification of cryptographic signature and Improper Check for Unusual or Exceptional Conditions vulnerability in Estonian Information System Authority RIA libdigidocpp, DigiDoc4, DigiDoc on Android, and DigiDoc on iOS. This issue affects libdigidocpp: from 4.1.0 before 4.2.1; DigiDoc4:...
CVE-2026-42566
The CVE affects Meshtastic firmware prior to 2.7.23.b246bcd where a single node advertising a User.long_name containing malformed UTF-8 over LoRa can render other radios unusable over BLE when managed via the iOS app. Root cause: a null terminator can be placed in the middle of a multibyte sequen...
XNUTest
xnutesting Research & Education Only — Proof-of-concept...
PT-2026-20524
ScadaApp for iOS 1.1.4.0 contains a denial of service vulnerability that allows attackers to crash the application by inputting an oversized buffer in the Servername field. Attackers can paste a 257-character buffer during login to trigger an application crash on iOS devices...
PT-2026-7469
Name of the Vulnerable Software and Affected Versions ZOLL ePCR IOS application affected versions not specified Description The application displays user-supplied data within a WebView without proper sanitization. Specifically, attacker-controlled strings entered into PCR fields such as run numbe...
CVE-2020-37087
Easy Transfer Wifi Transfer v1.7 for iOS contains a persistent cross-site scripting vulnerability that allows remote attackers to inject malicious scripts by manipulating the oldPath, newPath, and path parameters in Create Folder and Move/Edit functions. Attackers can exploit improper input...
PT-2026-5836
Easy Transfer 1.7 iOS mobile application contains a directory traversal vulnerability that allows remote attackers to access unauthorized file system paths without authentication. Attackers can exploit the vulnerability by manipulating path parameters in GET and POST requests to list or download...
CVE-2022-50952 Banco Guayaquil 8.0.0 Mobile iOS Cross-Site Scripting via Profile Name Input
Banco Guayaquil 8.0.0 mobile iOS application contains a persistent cross-site scripting vulnerability in the TextBox Name Profile input. Attackers can inject malicious script code through a POST request that executes on application review without user interaction...
CVE-2021-33981
An insecure, direct object vulnerability in hunting/fishing license retrieval function of the "Fish | Hunt FL" iOS app versions 3.8.0 and earlier allows a remote authenticated attacker to retrieve other people's personal information and images of their hunting/fishing licenses...
CVE-2025-14023
LINE client for iOS prior to 15.19 allows UI spoofing due to inconsistencies between the navigation state and the in-app browser's user interface, which could create confusion about the trust context of displayed pages or interactive elements under specific conditions...
PT-2025-49138
Name of the Vulnerable Software and Affected Versions AirKeyboard iOS App version 1.0.5 Description The AirKeyboard iOS App has a missing authentication mechanism. This allows unauthenticated attackers to send arbitrary keystrokes to a victim’s iOS device in real-time, without requiring user...
EUVD-2025-197765
Improper certificate validation vulnerability exists in 'デジラアプリ' App for iOS prior to ver.80.10.00. If this vulnerability is exploited, a man-in-the-middle attack may allow an attacker to eavesdrop on and/or tamper with an encrypted communication...
CVE-2025-5009 Information Disclosure in Gemini iOS App
In Gemini iOS, when a user shared a snippet of a conversation, it would share the entire conversation via a sharable public link that contained the entire conversation history and not just the snippet...