iLEAPP

iOS Logs, Events, And Plists Parser iLEAPP parses iOS and iPadOS forensic extractions and produces HTML, TSV, timeline, KML, and LAVA output. It supports iOS/iPadOS 11 through current versions. Browse the full searchable artifact list at leapps.org/artifacts filter by LEAPP tool. Quick Start...

ARC-Browser-Address-Bar-Spoofing-PoC

ARC Browser アドレスバースプーフィング - iOS/iPadOS CVE-2024-25733 ARC Browser アドレスバースプーフィング PoC - iOS/iPadOS エクスプロイト PoC Proof of Concept root@kitploit: function spoof setTimeout = window.stop; let randomPort; do randomPort = Math.floorMath.random 1000; while randomPort === 0 || randomPort === 443;...

CVE-2026-28858

⚠️ CVE-2026-28858 — Apple iOS/iPadOS 中的缓冲区溢出 root@kitploit: ╔══════════════════════════════════════════════════════════════╗ ║ 严重性：严重 │ CVSS: 9.8 │ CWE-120 │ 远程 ║ ╚══════════════════════════════════════════════════════════════╝ 远程用户无需用户交互或特权即可导致 iOS/iPadOS 系统意外终止或内核内存损坏。 📋 技术信息 字段| 值 ---|--- CVE...

CVE-2023-41993

CVE-2023-41993 CVE-2023-41993 の PoC エクスプロイトです。addrof/fakeobj までの実装のみです。信頼性はあまり高くありません。改善したい場合は、structure ID をスプレーしてみてください。 既知の影響を受けるバージョン MacOS 14.0 iOS 17.0、17.1 beta 1 iPadOS 17.0...

CVE-2026-65343-e7eb2ed

CVE-2026-65343 — AppleKeyStore 越界读取（KASLR 绕过） 组件： AppleKeyStore 内核扩展 — LibSerSEPControlDeserialize 受影响： iOS / iPadOS 26.6 23G71 及更早版本 修复于： iOS / iPadOS 26.6.1 23G83 类型： SEP 控制消息反序列化中的越界读取 影响： 内核指针泄露 → 从沙盒内、无权限的进程实现 KASLR 绕过（通过 DYLDINTERPOSE 捕获 ACM 句柄） 致谢 发现者：Drinor Selmanaj （Sentry）、Surya Narayan...

POC-for-CVE-2023-41993

CVE-2023-41993 CVE-2023-41993 の PoC エクスプロイト。 addrof/fakeobj までしか書かれていません。 信頼性は高くありません。 より良くしたい場合は、構造体 ID をスプレーしてみてください。 POC リンク https://po6ix.github.io/POC-for-CVE-2023-41993/pwn.html 複数のリクエストがあったため、GitHub Pages でホストすることにしました。 GitHub にブロックされないことを祈っていてください… 既知の影響を受けるバージョン MacOS 14.0 iOS 17.0, 17.1...

SparstanBoogie

SparstanBoogie の起源は、報告によると iOS/iPadOS 15.2 - 16.7 RC 20H18 および 17.0 でテストされましたが、実際に動作しなくなった 26.1 26.1 のデバイスでのテストに関しては、より低レベルなテストが必要であり、歓迎されます。また、報告されたバージョンより上または下のデバイスでのテストも歓迎されます。新しいデバイスで再発する可能性があるため、自分にとって動作するかどうかを報告したいと考える善意のユーザーを無視する理由はありません。このツールの元となった親プログラムでサポートされていないとされていた古いデバイスも、iOS 15.8.7...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Apple Ipados

CVE-2026-65330...

Vulnerabilities found in Apple iOS and iPadOS

Apple has identified several vulnerabilities in iOS and iPadOS. These vulnerabilities involve various security issues, such as authentication failures, out-of-bounds write and read errors, use-after-free situations, buffer overflows, race conditions, permission and authorization problems, memory...

CVE-2026-86905

This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. An app may be able to delete credentials stored in Keychain...

CVE-2026-86904

A privacy issue was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, watchOS 27. An app may be able to track users across apps and websites without permission...

CVE-2026-86924

A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7. Connecting a malicious accessory may cause unexpected system termination...

CVE-2026-86885

An input validation issue was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27. An attacker in radio range may be able to cause unexpected system termination...

CVE-2026-86883

A privacy issue was addressed with improved handling of files. This issue is fixed in iOS 27 and iPadOS 27, visionOS 27. An app may be able to access sensitive user data...

CVE-2026-86890

A logic issue was addressed with improved checks. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27. An attacker with physical access to a locked device may be able to view sensitive user information...

CVE-2026-86886

A path traversal issue was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, watchOS 27. An app may be able to modify protected system files...

CVE-2026-86887

A privacy issue was addressed by removing sensitive data. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, visionOS 27. An app may be able to bypass certain Privacy preferences...

CVE-2026-86879

A denial-of-service issue was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27. A remote attacker may be able to cause a denial-of-service...

CVE-2026-86878

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27. An app may be able to access sensitive user data...

CVE-2026-86869

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, macOS Golden Gate 27. Processing a maliciously crafted image may lead to unexpected app termination...