674 matches found
Mac Malware Targets Apple’s New M1 Processor
Three months after Apple launched its new M1 system-on-a-chip SoC, cybercriminals have developed what may be the first malicious macOS application targeting the mobile giant’s first in-house silicon. Click to Register The recently uncovered malicious application, called GoSearch22, natively runs ...
PT-2021-4267
Name of the Vulnerable Software and Affected Versions YARA versions prior to 4.0.4 Description The issue is related to an integer overflow and several buffer overflow reads in the libyara/modules/macho/macho.c module of YARA. This could allow an attacker to cause denial of service or information...
PT-2022-8875 · Upx +2 · Upx +2
Name of the Vulnerable Software and Affected Versions: UPX version 4.0.0 Description: A heap-based buffer over-read was discovered in the get le64 function in bele.h via a crafted Mach-O file. Recommendations: For UPX version 4.0.0, at the moment, there is no information about a newer version tha...
PT-2022-8876 · Upx +2 · Upx +2
Name of the Vulnerable Software and Affected Versions: UPX version 4.0.0 Description: A floating point exception was discovered in the elf lookup function in p lx elf.cpp via a crafted Mach-O file. Recommendations: For UPX version 4.0.0, consider updating to a newer version that contains a fix fo...
PT-2022-8870 · Upx +2 · Upx +2
Name of the Vulnerable Software and Affected Versions: UPX version 4.0.0 Description: A heap-based buffer over-read was discovered in the invert pt dynamic function in p lx elf.cpp via a crafted Mach-O file. Recommendations: For UPX version 4.0.0, as a temporary workaround, consider disabling the...
PT-2022-8873 · Upx +2 · Upx +2
Name of the Vulnerable Software and Affected Versions: UPX version 4.0.0 Description: A heap-based buffer over-read issue was discovered in the acc ua get be32 function, located in the miniacc.h file, which can be exploited via a crafted Mach-O file. Recommendations: For UPX version 4.0.0, at the...
PT-2022-8874 · Upx +2 · Upx +2
Name of the Vulnerable Software and Affected Versions: UPX version 4.0.0 Description: A heap-based buffer over-read was discovered in the get le32 function in bele.h via a crafted Mach-O file. Recommendations: For UPX version 4.0.0, at the moment, there is no information about a newer version tha...
PT-2022-8871 · Upx +2 · Upx +2
Name of the Vulnerable Software and Affected Versions: UPX version 4.0.0 Description: An invalid memory address reference was discovered in the elf lookup function in p lx elf.cpp via a crafted Mach-O file. Recommendations: For UPX version 4.0.0, consider updating to a newer version that contains...
PT-2022-8872 · Upx +2 · Upx +2
Name of the Vulnerable Software and Affected Versions: UPX version 4.0.0 Description: A memory-related issue was found in the adjABS function within the p lx elf.cpp file of UPX, which can be triggered by a specially crafted Mach-O file. Recommendations: For UPX version 4.0.0, at the moment, ther...
Kaspersky: [Fixed] KIS for macOS is vulnerable to AV bypass due to improper client authorization on XPC service
Note! Thank you for your report. For the purposes of the further analysis of the vulnerability, that you kindly report to us, could you please fill all fields in square brackets. This information will help us to respond you more quickly and triage your report. Thanks a lot for your assistance...
ios-resources
PoC exploit for iOS device. The primary CVE ID is not explicitly mentioned, but the repository contains resources for iOS hacking, including ARMv8 instruction set documentation and assembly language crash course. The target product/service is the iOS operating system, and the vulnerability...
Iblessing - An iOS Security Exploiting Toolkit, It Mainly Includes Application Information Collection, Static Analysis And Dynamic Analysis
iblessing iblessing is an iOS security exploiting toolkit, it mainly includes application information collection , static analysis and dynamic analysis. iblessing is based on unicorn engine and capstone engine. Features Cross-platform: Tested on macOS and Ubuntu. iOS App static info extract,...
CoreFoundation-sys (=0.1.4), IOKit-sys (>=0.1.0 <=0.1.5) +1453 more potentially affected by unknown CVE via mach (>=0.0.3 <=0.3.2)
mach CARGO version =0.0.3, =0.1.0, =1.0.0, =1.0.3, =0.2.2, =0.2.6, =0.1.0-beta.8, =0.23.0, =0.23.0, =0.1.0, =0.1.0, =0.0.2, =0.2.0, =0.3.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2020-0168...
Updated upx packages fix security vulnerabilities
The updated packages fix security vulnerabilities: PackLinuxElf64::unpack in plxelf.cpp in UPX 3.95 allows remote attackers to cause a denial of service double free, limit the ability of a malware scanner to operate on the entire original data, or possibly have unspecified other impact via a...
Part II: Returning to Adobe Reader symbols on macOS
Posted by Mateusz Jurczyk, Project Zero In a blog post titled "The story of Adobe Reader symbols" published in October 2019, I presented an analysis of the debug symbols shipped with some older versions of Adobe Reader for Unix-family systems released between 1997-2013. Such symbols can prove...
UPX Invalid Memory Address Dereference Vulnerability
UPX is an open source executable file packaging program that supports a variety of file formats from different operating systems. An invalid memory address dereference vulnerability exists in the canUnpack function in pmach.cpp in UPX 3.95. An attacker can exploit this vulnerability to cause a...
DEBIAN-CVE-2019-20053
An invalid memory address dereference was discovered in the canUnpack function in pmach.cpp in UPX 3.95 via a crafted Mach-O file...
CVE-2019-20053
An invalid memory address dereference was discovered in the canUnpack function in pmach.cpp in UPX 3.95 via a crafted Mach-O file...
