iLEAPP

iOS Logs, Events, And Plists Parser iLEAPP parses iOS and iPadOS forensic extractions and produces HTML, TSV, timeline, KML, and LAVA output. It supports iOS/iPadOS 11 through current versions. Browse the full searchable artifact list at leapps.org/artifacts filter by LEAPP tool. Quick Start...

ARC-Browser-Address-Bar-Spoofing-PoC

Suplantación de la barra de direcciones de ARC Browser - iOS/iPadOS CVE-2024-25733 PoC de suplantación de la barra de direcciones de ARC Browser - iOS/iPadOS Exploit PoC Prueba de concepto root@kitploit: function spoof setTimeout = window.stop; let randomPort; do randomPort = Math.floorMath.rando...

SparstanBoogie

SparstanBoogie's origins were tested reportedly on iOS/iPadOS 15.2 - 16.7 RC 20H18 and 17.0 however, tests have been conducted up to 26.1 26.1. Also any testing on devices above or under whats been reported is welcomed as it may come back in newer devices so theres no reason to shrug off any good...

CVE-2026-28858

⚠️ CVE-2026-28858 — Buffer Overflow in Apple iOS/iPadOS root@kitploit: ╔══════════════════════════════════════════════════════════════╗ ║ SEVERITY: CRITICAL │ CVSS: 9.8 │ CWE-120 │ REMOTE ║ ╚══════════════════════════════════════════════════════════════╝ A remote user can cause unexpected system...

CVE-2023-41993

CVE-2023-41993 Exploit PoC para CVE-2023-41993. Está escrito solo hasta addrof/fakeobj. La fiabilidad no es muy buena. Si quieres mejorarlo, intenta hacer spray de los IDs de estructura. Versiones afectadas conocidas MacOS 14.0 iOS 17.0, 17.1 beta 1 iPadOS 17.0...

POC-for-CVE-2023-41993

CVE-2023-41993 PoC exploit for CVE-2023-41993. It's written only up to addrof/fakeobj. Reliability is not great. If you want to make it better, try to spray structure IDs. POC link https://po6ix.github.io/POC-for-CVE-2023-41993/pwn.html I have decided to host with github pages from multiple...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Apple Ipados

CVE-2026-64788 — IOGPUFamily Use-After-Free Component: IO...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Apple Ipados

CVE-2026-64788 — IOGPUFamily Use-After-Free Component: IO...

CVE-2026-65367

A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5. An app may be able to cause unexpected system termination...

CVE-2026-65367

CVE-2026-65367 is a null pointer dereference in Apple iOS/iPadOS , addressed with improved input validation. An app may be able to cause unexpected system termination , representing a local denial-of-service. The CVSS 3.1 score is 5.5 (MEDIUM) , with a local attack vector, low complexity, low pri...

CVE-2026-43657

Apple addressed a permissions issue in iOS 26.5 and iPadOS 26.5 that allowed a malicious app to enumerate installed apps on the device. The fix introduces additional restrictions to limit the information a third-party app can discover about other installed applications. The issue carries a CVSS 3...

PT-2026-81494

Name of the Vulnerable Software and Affected Versions iOS versions prior to 18.7.9 iOS versions prior to 26.5 iPadOS versions prior to 18.7.9 iPadOS versions prior to 26.5 Description A null pointer dereference occurs due to insufficient input validation, which may allow an application to cause...

Astra Linux – Vulnerability in WebKit2GTK

A logic issue was addressed through improved checks. This issue is fixed in Safari 16.2, tvOS 16.2, iCloud for Windows 14.1, macOS Ventura 13.1, iOS 16.2, and iPadOS 16.2, as well as watchOS 9.2. Processing maliciously crafted web content may disclose sensitive user information...

Astra Linux – Vulnerability in WebKit2GTK

A race condition has been addressed through improved state handling. This issue is fixed in Safari 26.2, iOS 18.7.3, and iPadOS 18.7.3; iOS 26.2 and iPadOS 26.2; macOS Tahoe 26.2; tvOS 26.2; visionOS 26.2; and watchOS 26.2. Processing maliciously crafted web content may lead to an unexpected...

Astra Linux – Vulnerability in WebKit2GTK

The issue was addressed through improved checks. This issue is fixed in Safari 26.1, iOS 26.1, iPadOS 26.1, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, and watchOS 26.1. A malicious website may exfiltrate data across origins...

Astra Linux – Vulnerability in WebKit2GTK

The issue was addressed through improved checks. This issue is fixed in Safari 18.2, iOS 18.2, iPadOS 18.2, iPadOS 17.7.3, macOS Sequoia 15.2, tvOS 18.2, visionOS 2.2, and watchOS 11.2. Processing maliciously crafted web content may lead to an unexpected process crash...

Vulnerabilities found in Apple iOS and iPadOS

Apple has identified several vulnerabilities in iOS and iPadOS. These vulnerabilities involve improper memory management, such as use-after-free errors, buffer overflows, out-of-bounds reads and writes, integer overflows, race conditions, and inadequate input validation. These errors can lead to...

CVE-2026-65338

creationtimestamp| type| source ---|---|--- 2026-08-18 04:49:47+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260818...

CVE-2026-65332

creationtimestamp| type| source ---|---|--- 2026-08-18 04:49:33+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260818...

CVE-2026-43794

creationtimestamp| type| source ---|---|--- 2026-08-18 04:46:54+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260818 2026-08-18 08:46:42+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=2020...