xpc-string-leak

xpc-string-leak xpc-string-leak is a proof-of-concept exploit for an out-of-bounds memory read in libxpc. This exploit uses the vulnerability to read out-of-bounds heap memory from diagnosticd, an unsandboxed root process with the taskforpid-allow entitlement. The vulnerability: CVE-2018-4248 On...

CVE-2024-0258

CVE-2024-0258 Технический анализ и публичная документация, связанные с CVE-2024-0258 , уязвимостью Apple libxpc. Этот репозиторий содержит исследовательские заметки, технические наблюдения, результаты обратной разработки и публичные ссылки, предназначенные для документирования уязвимости и её...

Triple_fetch

triplefetch - ianbeer https://bugs.chromium.org/p/project-zero/issues/detail?id=1247 이것은 CVE-2017-7047에 대한 익스플로잇입니다. libxpc의 논리 오류로 인해 악의적인 메시지 발신자가 공유 메모리로 백업된 xpcdata 객체를 보낼 수 있었습니다. xpc 메시지의 소비자들은 xpcdata 객체의 백업 버퍼가 수신자에 의해 처리되는 동안 발신자에 의해 수정될 수 있다고 예상하지 못한 것으로 보입니다. 이 프로젝트는 CVE-2017-7047을 악용하...

Triple_Fetch-Kernel-Creds

Triple-Fetch-Kernel-Creds launchd + taskt 포인터에서 커널 자격 증명을 탈취하려는 시도 기반: CVE-2017-7047 Triple Fetch 소개 Google Project Zero의 Ian Beer Triple Fetch는 iOS 10.3.3 이전의 iOS 기기를 대상으로 하는 익스플로잇입니다. 이는 libxpc의 논리 오류를 악용하여 공격자가 공유 메모리로 백업되는 xpcdata 객체를 사용해 악성 메시지를 보낼 수 있게 합니다. 원본 익스플로잇의 구성 원본 익스플로잇은 NSXPC를 사용하...

The vulnerability of the libxpc library in macOS operating systems allows attackers to gain unauthorized access to protected information.

The vulnerability of the libxpc library in macOS operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Security Bypass Vulnerability in Multiple Apple Products (CNVD-2026-14491)

Apple iOS is an operating system developed for mobile devices. apple watchOS is an operating system for smartwatches. apple macOS is a specialized operating system developed for Mac computers. A security bypass vulnerability exists in multiple Apple products and is due to a logic issue in the...

Apple多款产品 安全漏洞

Apple iOS is an operating system developed for mobile devices. apple watchOS is an operating system for smartwatches. apple macOS is a specialized operating system developed for Mac computers. A security bypass vulnerability exists in multiple Apple products and is due to a logic issue in the...

EUVD-2015-7660

Malware in sbrugna...

EUVD-2016-5660

Malware in sbrugna...

EUVD-2016-5603

Malware in sbrugna...

EUVD-2015-3831

Malware in sbrugna...

The vulnerability of the libxpc component in macOS operating systems allows attackers to increase their privileges.

The vulnerability of the libxpc component in macOS operating systems is related to incorrect path name restrictions for restricted access directories. Exploiting this vulnerability can allow attackers to increase their privileges...

VulnCheck KEV: CVE-2018-4237

An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "libxpc" component. It allows attackers to gain privileges via a crafted app that leverages a...

The vulnerabilities of the libxml2 and libxpc libraries in MacOS, iPadOS, iOS operating systems allow attackers to execute XSS attacks.

The vulnerability of the libxml2 and libxpc libraries in MacOS, iPadOS, and iOS operating systems stems from the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

About the security content of tvOS 17.6

About the security content of tvOS 17.6 This document describes the security content of tvOS 17.6. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

About the security content of watchOS 10.6

About the security content of watchOS 10.6 This document describes the security content of watchOS 10.6. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are availabl...

The vulnerability of the libxpc library in the watchOS operating system, macOS Sonoma, tvOS, iOS, iPadOS, macOS Ventura, allows a hacker to escalate their privileges.

The vulnerability of the libxpc library in the watchOS operating system, macOS Sonoma, tvOS, iOS, iPadOS, and macOS Ventura, is related to errors in handling symbolic links. Exploiting this vulnerability can allow an attacker to gain increased privileges...

About the security content of watchOS 10.4

About the security content of watchOS 10.4 This document describes the security content of watchOS 10.4. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are availabl...

About the security content of iOS 17.3 and iPadOS 17.3

About the security content of iOS 17.3 and iPadOS 17.3 This document describes the security content of iOS 17.3 and iPadOS 17.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches ...

About the security content of tvOS 17.3

About the security content of tvOS 17.3 This document describes the security content of tvOS 17.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...