11190 matches found
The vulnerability in the kernel of operating systems such as macOS, iOS, iPadOS, tvOS, watchOS, and visionOS allows attackers to disclose protected information.
The vulnerability of the kernel in operating systems such as macOS, iOS, iPadOS, tvOS, watchOS, and visionOS is related to a kernel address leakage. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by the system’s security measures...
POC-for-CVE-2023-41993
CVE-2023-41993 CVE-2023-41993용 PoC 익스플로잇입니다. addrof/fakeobj까지만 작성되어 있습니다. 신뢰성은 좋지 않습니다. 더 개선하고 싶다면 structure ID를 스프레이해 보세요. POC 링크 https://po6ix.github.io/POC-for-CVE-2023-41993/pwn.html 여러 요청이 있어서 github pages로 호스팅하기로 결정했습니다. github가 저를 차단하지 않길 바랍니다... 알려진 영향 받는 버전 MacOS 14.0 iOS 17.0, 17.1 beta...
iLEAPP
iOS Logs, Events, And Plists Parser iLEAPP parses iOS and iPadOS forensic extractions and produces HTML, TSV, timeline, KML, and LAVA output. It supports iOS/iPadOS 11 through current versions. Browse the full searchable artifact list at leapps.org/artifacts filter by LEAPP tool. Quick Start...
ARC-Browser-Address-Bar-Spoofing-PoC
ARC 브라우저 주소 표시줄 스푸핑 - iOS/iPadOS CVE-2024-25733 ARC 브라우저 주소 표시줄 스푸핑 PoC - iOS/iPadOS 익스플로잇 PoC 개념 증명 function spoof setTimeout = window.stop; let randomPort; do randomPort = Math.floorMath.random 1000; while randomPort === 0 || randomPort === 443; document.location = "https://google.com:" +...
SparstanBoogie
SparstanBoogie의 기원은 iOS/iPadOS 15.2 - 16.7 RC 20H18 및 17.0에서 테스트되었다고 보고되었으나, 실제로 작동이 중단된 26.1 26.1 장치에서의 낮은 수준의 테스트가 필요하며 환영합니다. 또한 보고된 것보다 위 또는 아래의 장치에서의 테스트도 환영합니다. 이 도구가 최신 장치에서 다시 작동할 수 있으므로, 이 도구가 자신에게 작동하는지 보고하려는 선의의 사용자를 무시할 이유가 없습니다. 이 도구가 파생된 상위 프로그램에서 지원되지 않는다고 주장되었던 iOS 15.8.7과 같은 구형...
CVE-2026-28858
⚠️ CVE-2026-28858 — Apple iOS/iPadOS 버퍼 오버플로우 ╔══════════════════════════════════════════════════════════════╗ ║ 심각도: 치명적 │ CVSS: 9.8 │ CWE-120 │ 원격 ║ ╚══════════════════════════════════════════════════════════════╝ 원격 사용자는 사용자 상호작용이나 권한 없이 iOS/iPadOS에서 시스템의 예기치 않은 종료 또는 커널 메모리 손상을 유발할 수 있습니다. 📋 기...
CVE-2023-41993
CVE-2023-41993 CVE-2023-41993에 대한 PoC 익스플로잇입니다. addrof/fakeobj까지만 작성되었습니다. 신뢰성이 높지 않습니다. 더 개선하고 싶다면 structure ID를 스프레이해 보세요. 알려진 영향을 받는 버전 MacOS 14.0 iOS 17.0, 17.1 beta 1 iPadOS 17.0...
Vulnerability hidden in Apple CoreGraphics
Apple has identified a vulnerability in CoreGraphics on iOS, iPadOS, and macOS. This vulnerability involves an out-of-bounds write operation within the CoreGraphics component. An attacker can exploit this vulnerability by processing specially crafted files, which may lead to the execution of...
Linux Distros Unpatched Vulnerability : CVE-2026-43670
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A Content Security Policy bypass was addressed with improved enforcement in AudioWorklet contexts. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS...
CVE-2026-65343-e7eb2ed
CVE-2026-65343 — AppleKeyStore OOB 읽기 KASLR 무력화 구성 요소: AppleKeyStore 커널 확장 — LibSerSEPControlDeserialize 영향 대상: iOS / iPadOS 26.6 23G71 및 이전 버전 수정 버전: iOS / iPadOS 26.6.1 23G83 유형: SEP 제어 메시지 역직렬화에서의 범위를 벗어난 읽기 영향: 커널 포인터 유출 → 샌드박스 내, 엔타이틀먼트 없는 프로세스로부터의 KASLR 무력화 DYLDINTERPOSE ACM 핸들 캡처 경유 크레딧 발견...
Update your iPhone, iPad, or Mac: Flaw could run attackers’ code
Apple has released updates for iPhones, iPads, and Macs to fix a flaw that could let an attacker run code when a device processes a malicious file. Apple says it may have been used in highly targeted attacks against iPhone users running versions of iOS before iOS 27. The fix is in iOS and iPadOS...
Apple Multiple Products Out-of-Bounds Write Vulnerability
Apple iOS, macOS, and iPadOS contain an out-of-bounds write vulnerability in CoreGraphics that may lead to arbitrary code execution...
CVE-2026-86950
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.1 and iPadOS 26.7.1, macOS Sequoia 15.8.1, macOS Tahoe 26.7.1. Processing a maliciously crafted file may lead to arbitrary code execution. Apple is aware of a report that this issue may have...
Apple Patches CoreGraphics Flaw Possibly Exploited in Targeted Attacks
Apple has released security updates to address a vulnerability in older versions of iOS, iPadOS, and macOS that it said may have been exploited in targeted attacks. The vulnerability, tracked as CVE-2026-86950 , refers to an out-of-bounds write impacting the CoreGraphics component that could lead...
CVE-2026-86950
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.1 and iPadOS 26.7.1, macOS Sequoia 15.8.1, macOS Tahoe 26.7.1. Processing a maliciously crafted file may lead to arbitrary code execution. Apple is aware of a report that this issue may have...
CVE-2026-86950
The CoreGraphics framework, a core component used by Apple for processing visual content like images and PDFs, contains an out-of-bounds write vulnerability. This flaw occurs when the software writes data beyond its allocated memory limits, potentially allowing an attacker to execute arbitrary co...
EUVD-2026-88445
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.1 and iPadOS 26.7.1, macOS Sequoia 15.8.1, macOS Tahoe 26.7.1. Processing a maliciously crafted file may lead to arbitrary code execution. Apple is aware of a report that this issue may have...
CVE-2026-86950
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.1 and iPadOS 26.7.1, macOS Sequoia 15.8.1, macOS Tahoe 26.7.1. Processing a maliciously crafted file may lead to arbitrary code execution. Apple is aware of a report that this issue may have...
About the security content of iOS 26.7.1 and iPadOS 26.7.1
About the security content of iOS 26.7.1 and iPadOS 26.7.1 This document describes the security content of iOS 26.7.1 and iPadOS 26.7.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and...
