36 matches found
osx-re-101
osx & ios re 101 正在进行中，我在积极收集这些资源。 必读 https://reverse.put.as/ https://blog.paloaltonetworks.com/tag/mac-os-x/ https://www.synack.com/blog/r-d-projects/os-x-security-research/ https://pewpewthespells.com/re.html https://github.com/bx/machO-tools https://github.com/kpwn/iOSRE 随时备查 "OSX Mach-O 文件格式参...
appmon
AppMonへようこそ！ で紹介されました US & EU AppMonは、macOS、iOS、AndroidのネイティブアプリのシステムAPI呼び出しを監視・改ざんするための自動化フレームワークです。これは Frida をベースにしています。 このプロジェクトは Ole André Vadla Ravnås のおかげで実現しました。彼にこのプロジェクトを捧げます。彼を GitHub、Twitter でフォローしてください。 以下のコンポーネントで構成されています： AppMon Sniffer - APIコールをインターセプトして、アプリが実行する興味深い操作を特定します AppMon...
CVE-2019-6207
CVE-2019-6207 该漏洞可在 macOSwop == NETRTFLAGS || w-wop == NETRTFLAGSPRIV && !rt-rtflags & w-warg goto done; / If the matching route has RTFLLINFO set, then we can skip scrubbing the MAC only if the outgoing interface is not loopback and the process has entitlement for neighbor cache read. / if w-wop...
OpenSovix
CVE-2025-46285 – Tiefgehende Sicherheitslückenanalyse und Proof-of-Concept Wichtiger Haftungsausschluss: Die folgenden Inhalte dienen ausschließlich der Sicherheitsbildung, defensiven Forschung und der Analyse von Sicherheitslücken. Testen oder nutzen Sie diese Sicherheitslücke nicht in nicht...
catbyte-toolkit
cb - Binary Analysis Toolkit for macOS/iOS Security Research...
CVE-2023-40442
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Big Sur 11.7.9, iOS 15.7.8 and iPadOS 15.7.8, macOS Monterey 12.6.8. An app may be able to read sensitive location information...
EUVD-2021-17764
Malware in sbrugna...
EUVD-2020-20405
Malware in sbrugna...
EUVD-2020-21984
Malware in sbrugna...
EUVD-2021-7334
Malicious code in bioql PyPI...
EUVD-2023-27599
Malicious code in bioql PyPI...
EUVD-2024-20805
Malicious code in bioql PyPI...
EUVD-2023-45594
Malicious code in bioql PyPI...
EUVD-2025-8964
Malicious code in bioql PyPI...
CVE-2025-31281
An input validation issue was addressed with improved memory handling. This issue is fixed in iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6. Processing a maliciously crafted file may lead to unexpected app termination...
CVE-2024-23270
The issue was addressed with improved memory handling. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5, tvOS 17.4. An app may be able to execute arbitrary code with kernel privileges...
CVE-2021-1767
This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to heap corruption...
CVE-2021-1815
A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. A local user may be able to modify protected parts of the file system...
CVE-2020-10003
An issue existed within the path validation logic for symlinks. This issue was addressed with improved path sanitization. This issue is fixed in macOS Big Sur 11.0.1, iOS 14.2 and iPadOS 14.2, tvOS 14.2, watchOS 7.1. A local attacker may be able to elevate their privileges...
CVE-2020-27908
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, macOS Big Sur 11.0.1, iOS 14.2 and iPadOS 14.2, watchOS 7.1, tvOS 14.2. Processing a maliciously crafted audio file ma...