xpc-string-leak

xpc-string-leak xpc-string-leak es una prueba de concepto de explotación para una lectura de memoria fuera de los límites en libxpc. Este exploit utiliza la vulnerabilidad para leer memoria del heap fuera de los límites desde diagnosticd, un proceso root sin sandbox con el privilegio...

Triple_fetch

triplefetch - ianbeer https://bugs.chromium.org/p/project-zero/issues/detail?id=1247 Este es un exploit para CVE-2017-7047, un error lógico en libxpc que permitía a remitentes de mensajes maliciosos enviar objetos xpcdata que estaban respaldados por memoria compartida. Los consumidores de mensaje...

Triple_Fetch-Kernel-Creds

Triple-Fetch-Kernel-Creds Intento de robar credenciales del kernel desde launchd + puntero taskt Basado en: CVE-2017-7047 Acerca de Triple Fetch por Ian Beer de Google Project Zero Triple Fetch es un exploit para dispositivos iOS anteriores a iOS 10.3.3. Explota un error lógico en libxpc que...

CVE-2024-0258

CVE-2024-0258 Análisis técnico y documentación pública relacionada con CVE-2024-0258 , una vulnerabilidad de libxpc de Apple. Este repositorio contiene notas de investigación, observaciones técnicas, hallazgos de ingeniería inversa y referencias públicas destinadas a documentar la vulnerabilidad ...

The vulnerability of the libxpc library in macOS operating systems allows attackers to gain unauthorized access to protected information.

The vulnerability of the libxpc library in macOS operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Security Bypass Vulnerability in Multiple Apple Products (CNVD-2026-14491)

Apple iOS is an operating system developed for mobile devices. apple watchOS is an operating system for smartwatches. apple macOS is a specialized operating system developed for Mac computers. A security bypass vulnerability exists in multiple Apple products and is due to a logic issue in the...

Apple多款产品 安全漏洞

Apple iOS is an operating system developed for mobile devices. apple watchOS is an operating system for smartwatches. apple macOS is a specialized operating system developed for Mac computers. A security bypass vulnerability exists in multiple Apple products and is due to a logic issue in the...

EUVD-2015-7660

Malware in sbrugna...

EUVD-2016-5660

Malware in sbrugna...

EUVD-2016-5603

Malware in sbrugna...

EUVD-2015-3831

Malware in sbrugna...

The vulnerability of the libxpc component in macOS operating systems allows attackers to increase their privileges.

The vulnerability of the libxpc component in macOS operating systems is related to incorrect path name restrictions for restricted access directories. Exploiting this vulnerability can allow attackers to increase their privileges...

VulnCheck KEV: CVE-2018-4237

An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "libxpc" component. It allows attackers to gain privileges via a crafted app that leverages a...

The vulnerabilities of the libxml2 and libxpc libraries in MacOS, iPadOS, iOS operating systems allow attackers to execute XSS attacks.

The vulnerability of the libxml2 and libxpc libraries in MacOS, iPadOS, and iOS operating systems stems from the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

About the security content of tvOS 17.6

About the security content of tvOS 17.6 This document describes the security content of tvOS 17.6. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

About the security content of watchOS 10.6

About the security content of watchOS 10.6 This document describes the security content of watchOS 10.6. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are availabl...

The vulnerability of the libxpc library in the watchOS operating system, macOS Sonoma, tvOS, iOS, iPadOS, macOS Ventura, allows a hacker to escalate their privileges.

The vulnerability of the libxpc library in the watchOS operating system, macOS Sonoma, tvOS, iOS, iPadOS, and macOS Ventura, is related to errors in handling symbolic links. Exploiting this vulnerability can allow an attacker to gain increased privileges...

About the security content of watchOS 10.4

About the security content of watchOS 10.4 This document describes the security content of watchOS 10.4. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are availabl...

About the security content of iOS 17.3 and iPadOS 17.3

About the security content of iOS 17.3 and iPadOS 17.3 This document describes the security content of iOS 17.3 and iPadOS 17.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches ...

About the security content of tvOS 17.3

About the security content of tvOS 17.3 This document describes the security content of tvOS 17.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...