CVE-2024-54498-PoC

SharedFileListescape 利用 sharedfilelistd 漏洞逃逸 macOS 沙盒...

cve-2018-4407

Reproducción de CVE-2018-4407 Esta es una reproducción simple de CVE-2018-4407, que permite hacer fallar dispositivos macOS e iOS con sistemas operativos anteriores a finales de 2018. Para usar el programa, reemplaza sourceStr y destStr en sendbadopt.go con tu dirección IP y la dirección IP de la...

CVE-2026-87535

Information loss or omission in Safebrowsing in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-74453

Incorrect type conversion or cast in Safebrowsing in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted file. Chromium security severity: Low...

CVE-2026-87627

Interpretation conflict in Safebrowsing in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted file. Chromium security severity: Low...

CVE-2023-32413

Exploit de LPE en macOS CVE-2023-32413 / ZDI-23-845 / Pwn2Own Vancouver 2023 Este es el código del exploit que se mostró en Pwn2Own Vancouver 2023 https://youtu.be/c0cS4R0ja-I?t=180. Este código explota CVE-2023-32413 para obtener privilegios de root en cualquier macOS vulnerable. La vulnerabilid...

CVE-2024-32002

CVE-2024-32002 RCE PoC Descripción general Este repositorio contiene una Prueba de Concepto PoC para CVE-2024-32002, una vulnerabilidad de Ejecución Remota de Código RCE en los submódulos de Git. El exploit demuestra cómo se puede activar una carga útil maliciosa mediante la clonación recursiva d...

check_icmp_dos-CVE-2018-4407-

原理 原理就是把"icmp"包的其他字段弄成非法 macOS or iphone 内核解析時沒實作檢查大小造成 crash 了 設備 1. Apple iOS 11及更早版本：所有設備 2. Apple macOS High Sierra（受影響的最高版本為10.13.6）：所有設備 3. Apple macOS Sierra（受影響的最高版本為10.12.6）：所有設備 4. Apple OS X El Capitan及更早版本：所有設備 蘋果在10月30日推出的"iOS 12.1"更新包中徹底修復了這個漏洞 關鍵代碼 root@kitploit: pip install scapy...

CVE-2023-22524

Vulnerabilidad de ejecución remota de código en Atlassian Companion: Prueba de concepto CVE-2023-22524 Resumen Este repositorio contiene una prueba de concepto PoC para la vulnerabilidad de ejecución remota de código recientemente descubierta en Atlassian Companion para macOS, identificada como...

CVE-2026-6666-XPC-Service-NSKeyedUnarchiver-Deserialization-Attack-macOS-iOS-simulation-

CVE-2026-6666 – Ataque de deserialización NSKeyedUnarchiver en el servicio XPC simulación macOS/iOS Código del programa simulación en Python root@kitploit: !/usr/bin/env python3 vulnerablexpcservice.py - Simulated XPC service using unsafe plist deserialization import plistlib, subprocess,...

CVE-2026-86819

Waves Central for macOS contains a local privilege escalation in the privileged helper service. The helper authorizes connecting XPC clients by comparing the caller's code-signing certificate chain for equality with its own, rather than validating the caller against a pinned code requirement...

CVE-2026-81192

OpenTelemetry.Resources.Host NuGet package, which provides OpenTelemetry resource detectors for host, is affected by an untrusted search path vulnerability on macOS. Prior to version 1.16.0-beta.2, the host.id resource attribute detector launches the sh and ioreg executables by bare name rather...

cve-2021-29627

CVE-2021-29627 Algún código para desencadenar el bug incluyendo macsetfd spray. Se necesita algún spray target, sin embargo...

CVE-2018-14667

CVE-2018-14667 env the rich.ser can open the Calculator.app only MacOs download this project. the poc program in web-inf/src/Main.java...

CVE-2019-6203-PoC

CVE-2019-6203-PoC There is a PEAP bug in all Apple devices that would allow an attacker to force any Apple device iOS, macOS or tvOS to associate with a malicious access point. This is a PoC for CVE-2019-6203, works on iOS 12.2, macOS 10.14.4, tested on Kali Linux. You need a Wi-Fi card that...

EUVD-2026-74192

Waves Central for macOS contains a local privilege escalation in the privileged helper service. The helper authorizes connecting XPC clients by comparing the caller's code-signing certificate chain for equality with its own, rather than validating the caller against a pinned code requirement...

CVE-2026-86819

Waves Central for macOS contains a local privilege escalation in its privileged helper service. The root cause is improper XPC client authentication : the helper validates connecting clients by comparing the caller's code-signing certificate chain for equality with its own, rather than checking a...

CVE-2026-81192 OpenTelemetry.Resources.Host vulnerable to arbitrary code execution via local PATH hijacking on macOS

OpenTelemetry.Resources.Host NuGet package, which provides OpenTelemetry resource detectors for host, is affected by an untrusted search path vulnerability on macOS. Prior to version 1.16.0-beta.2, the host.id resource attribute detector launches the sh and ioreg executables by bare name rather...

CVE-2026-81192

CVE-2026-81192 is an untrusted search path vulnerability in the OpenTelemetry.Resources.Host NuGet package, affecting macOS only. The host.id resource attribute detector invokes sh and ioreg by bare name, resolving them through the PATH environment variable rather than by absolute path. A less-pr...

CVE-2026-81192 OpenTelemetry.Resources.Host vulnerable to arbitrary code execution via local PATH hijacking on macOS

OpenTelemetry.Resources.Host NuGet package, which provides OpenTelemetry resource detectors for host, is affected by an untrusted search path vulnerability on macOS. Prior to version 1.16.0-beta.2, the host.id resource attribute detector launches the sh and ioreg executables by bare name rather...