iLEAPP

Analizador de Logs, Eventos y Plists de iOS iLEAPP analiza extracciones forenses de iOS y iPadOS y produce salida en HTML, TSV, timeline, KML y LAVA. Admite iOS/iPadOS 11 hasta las versiones actuales. Explora la lista completa de artefactos buscable en leapps.org/artifacts filtra por herramienta...

SparstanBoogie

SparstanBoogie 的起源据称在 iOS/iPadOS 15.2 - 16.7 RC 20H18 和 17.0 上进行了测试，然而实际测试已进行到 26.1 26.1 的设备上进行测试。此外，也欢迎在高于或低于已报告版本的设备上进行测试，因为它可能在新设备上再次出现，因此没有理由拒绝任何愿意报告此工具对其是否有效的善意测试者。据称不受此工具所源自的“前代”程序支持的旧设备，已被发现受到影响，例如 iOS 15.8.7。 据报道，根据如实的漏洞披露，该问题已通过改进符号链接处理得到解决。该问题据称已在 iOS 17.7.1 和 iPadOS 17.7.1、iOS 18.1 和...

ARC-Browser-Address-Bar-Spoofing-PoC

ARC 浏览器地址栏欺骗 - iOS/iPadOS CVE-2024-25733 ARC 浏览器地址栏欺骗 PoC - iOS/iPadOS 漏洞利用 PoC（概念验证） root@kitploit: function spoof setTimeout = window.stop; let randomPort; do randomPort = Math.floorMath.random 1000; while randomPort === 0 || randomPort === 443; document.location = "https://google.com:" +...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Apple Ipados

CVE-2026-64788 — IOGPUFamily Use-After-Free Component: IO...

CVE-2026-28858

⚠️ CVE-2026-28858 — Buffer Overflow en Apple iOS/iPadOS root@kitploit: ╔══════════════════════════════════════════════════════════════╗ ║ SEVERIDAD: CRÍTICA │ CVSS: 9.8 │ CWE-120 │ REMOTO ║ ╚══════════════════════════════════════════════════════════════╝ Un usuario remoto puede provocar la...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Apple Ipados

CVE-2026-64788 — IOGPUFamily Use-After-Free Component: IO...

CVE-2023-41993

CVE-2023-41993 CVE-2023-41993 的概念验证（PoC）漏洞利用代码。目前仅编写到 addrof/fakeobj 阶段，可靠性不高。如果想要改进它，可以尝试喷射结构 ID（structure IDs）。 已知受影响版本 MacOS 14.0 iOS 17.0, 17.1 beta 1 iPadOS 17.0...

POC-for-CVE-2023-41993

CVE-2023-41993 PoC exploit para CVE-2023-41993. Está escrito solo hasta addrof/fakeobj. La fiabilidad no es muy buena. Si quieres mejorarlo, intenta hacer spray de structure IDs. Enlace del PoC https://po6ix.github.io/POC-for-CVE-2023-41993/pwn.html He decidido alojarlo con GitHub Pages por las...

CVE-2026-65367

A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5. An app may be able to cause unexpected system termination...

CVE-2026-65367

CVE-2026-65367 is a null pointer dereference in Apple iOS/iPadOS , addressed with improved input validation. An app may be able to cause unexpected system termination , representing a local denial-of-service. The CVSS 3.1 score is 5.5 (MEDIUM) , with a local attack vector, low complexity, low pri...

CVE-2026-43657

Apple addressed a permissions issue in iOS 26.5 and iPadOS 26.5 that allowed a malicious app to enumerate installed apps on the device. The fix introduces additional restrictions to limit the information a third-party app can discover about other installed applications. The issue carries a CVSS 3...

PT-2026-81494

Name of the Vulnerable Software and Affected Versions iOS versions prior to 18.7.9 iOS versions prior to 26.5 iPadOS versions prior to 18.7.9 iPadOS versions prior to 26.5 Description A null pointer dereference occurs due to insufficient input validation, which may allow an application to cause...

Astra Linux – Vulnerability in WebKit2GTK

A logic issue was addressed through improved checks. This issue is fixed in Safari 16.2, tvOS 16.2, iCloud for Windows 14.1, macOS Ventura 13.1, iOS 16.2, and iPadOS 16.2, as well as watchOS 9.2. Processing maliciously crafted web content may disclose sensitive user information...

Vulnerabilities found in Apple iOS and iPadOS

Apple has identified several vulnerabilities in iOS and iPadOS. These vulnerabilities involve improper memory management, such as use-after-free errors, buffer overflows, out-of-bounds reads and writes, integer overflows, race conditions, and inadequate input validation. These errors can lead to...

CVE-2026-65338

creationtimestamp| type| source ---|---|--- 2026-08-18 04:49:47+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260818...

CVE-2026-65332

creationtimestamp| type| source ---|---|--- 2026-08-18 04:49:33+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260818...

CVE-2026-43794

creationtimestamp| type| source ---|---|--- 2026-08-18 04:46:54+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260818 2026-08-18 08:46:42+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=2020...

EUVD-2026-60498

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to memory corruption...

EUVD-2026-60483

The issue was addressed with improved checks. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash...

EUVD-2026-60492

A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash...