CVE-2020-9934

CVE-2020-9934 此概念验证是一个简单的Swift程序，它会使自身和终端获取每个kTCCService权限（从tccd中提取），然后执行四项操作： 在受TCC保护的目录中创建名为""的文件 从受TCC保护的目录中读取该文件的数据 列出TCC目录中的所有文件（包括""） 从受TCC保护的目录中删除该文件 用法： ./bypasstc 请参阅Medium上的完整文章...

CVE-2023-26818

Descargo de responsabilidad Este exploit ha sido creado únicamente con fines de investigación y para el desarrollo de técnicas defensivas efectivas. No está destinado a ser utilizado para actividades maliciosas o no autorizadas. El autor y el propietario del script rechazan cualquier...

EUVD-2025-23578

Malicious code in bioql PyPI...

EUVD-2024-2213

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2024-36287

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mattermost Desktop App versions =5.7.0 fail to disable certain Electron debug flags which allows for bypassing TCC restrictions on macOS. CVE-2024-36287 Note th...

CVE-2025-54871

Electron Capture facilitates video playback for screen-sharing and capture. In versions 2.19.1 and below, the elecap app on macOS allows local unprivileged users to bypass macOS TCC privacy protections by enabling ELECTRONRUNASNODE. This environment variable allows arbitrary Node.js code to be...

PT-2025-31890

Name of the Vulnerable Software and Affected Versions Electron Capture versions 2.19.1 and below Description Electron Capture facilitates video playback for screen-sharing and capture. The elecap app on macOS allows local unprivileged users to bypass macOS TCC Transparency, Consent, and Control...

CVE-2025-1398 macOS TCC Bypass via Code Injection

Mattermost Desktop App versions =5.10.0 explicitly declared unnecessary macOS entitlements which allows an attacker with remote access to bypass Transparency, Consent, and Control TCC via code injection...

CVE-2025-1398 macOS TCC Bypass via Code Injection

Mattermost Desktop App versions =5.10.0 explicitly declared unnecessary macOS entitlements which allows an attacker with remote access to bypass Transparency, Consent, and Control TCC via code injection...

CVE-2020-9934 - macOS Transparency, Consent, and Control (TCC) Framework bypass

An issue existed in the handling of environment variables. This issue was addressed with improved validation. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6. A local user may be able to view sensitive user information. Recent assessments: busterb at August 03, 2020 10:42p...