ncrack

ncrack Ncrack is a high-speed network authentication cracking tool. It was built to help companies secure their networks by proactively testing all their hosts and networking devices for poor passwords. Security professionals also rely on Ncrack when auditing their clients. Ncrack was designed...

CVE-2026-79069

A flaw was found in Google Chrome's Tint component on macOS. A remote attacker could exploit a memory corruption vulnerability by enticing a user to visit a specially crafted HTML page. This could potentially allow the attacker to execute arbitrary code outside of the browser's security sandbox...

roamr

roamr Trova la miglior rete WiFi per il luogo in cui ti trovi, senza perdere la connessione. In un ufficio o a casa con più reti WiFi, la migliore cambia mentre ti sposti, e "migliore" non sono solo le barre del segnale. Una rete può mostrare tutte le barre e rimanere comunque lenta: 2.4 GHz...

CVE-2026-73102 RustDesk Path Traversal via macOS Clipboard File-Paste

RustDesk versions 1.3.9 through 1.4.9 contain a path traversal vulnerability in the macOS clipboard file-paste code path. The application accepts peer-supplied file descriptor names and joins them to the selected target directory without requiring normalized relative paths. A remote peer in an...

CVE-2026-73102

RustDesk versions 1.3.9 through 1.4.9 contain a path traversal vulnerability in the macOS clipboard file-paste code path. The application accepts peer-supplied file descriptor names and joins them to the selected target directory without requiring normalized relative paths, allowing a remote peer...

CVE-2026-73102 RustDesk Path Traversal via macOS Clipboard File-Paste

RustDesk versions 1.3.9 through 1.4.9 contain a path traversal vulnerability in the macOS clipboard file-paste code path. The application accepts peer-supplied file descriptor names and joins them to the selected target directory without requiring normalized relative paths. A remote peer in an...

EUVD-2026-66421

RustDesk versions 1.3.9 through 1.4.9 contain a path traversal vulnerability in the macOS clipboard file-paste code path. The application accepts peer-supplied file descriptor names and joins them to the selected target directory without requiring normalized relative paths. A remote peer in an...

CVE-2026-73102 RustDesk Path Traversal via macOS Clipboard File-Paste

RustDesk versions 1.3.9 through 1.4.9 contain a path traversal vulnerability in the macOS clipboard file-paste code path. The application accepts peer-supplied file descriptor names and joins them to the selected target directory without requiring normalized relative paths. A remote peer in an...

SigDigger

SigDigger - L'analizzatore di segnali digitali libero SigDigger è un analizzatore di segnali digitali libero per GNU/Linux e macOS, progettato per estrarre informazioni da segnali radio sconosciuti. Supporta una varietà di dispositivi SDR tramite SoapySDR e consente la demodulazione regolabile di...

CVE-2022-42864

CVE-2022-42864: Diabolische Cookies Was ist dieses Repo? Dies ist mein unvollständiger Proof-of-Concept-Exploit für CVE-2022-42864, eine Time-of-Check-Time-of-Use-Schwachstelle in IOHIDFamily, die mit iOS 16.2 / macOS Ventura 13.1 behoben wurde. Wie ist der Status des Proof-of-Concept? Der Exploi...

macOS-Kernel-Exploit

macOS-Kernel-Exploit DICHIARAZIONE DI NON RESPONSABILITÀ È necessario conoscere lo slide KASLR per utilizzare l'exploit. Inoltre, SMAP deve essere disabilitato, il che significa che non è sfruttabile su Mac dopo il 2015. Queste limitazioni rendono l'exploit praticamente inutilizzabile per lo...

Cve-2024-32002-poc

CVE-2024-32002 RCE PoC Panoramica Questo repository contiene una Proof of Concept PoC per CVE-2024-32002, una vulnerabilità di Remote Code Execution RCE nei sottomoduli Git. L'exploit dimostra come un payload dannoso possa essere attivato tramite una clonazione ricorsiva di un repository Git...

macOS_security_audit

🔒 macOS-Sicherheitsaudit Ein auf Bash basierendes Sicherheits-Audit-Toolkit für macOS, das die Härtungseinstellungen des Systems anhand der CIS-Benchmark-Empfehlungen überprüft und JSON/HTML-Berichte erzeugt. Erstellt von Bartłomiej Pogwizd · https://www.youtube.com/@pTech-pl Übersicht Dieses...

CVE-2022-26726-POC

CVE-2022-26726 Versioni Affette Come studente, ho accesso limitato ai dispositivi su cui posso testare questa vulnerabilità. Le versioni che ho testato finora sono MacOS 12.3.1, MacOS 12.3, MacOS 12.0, MacOS 10.15.7, e MacOS 11.6.1. La vulnerabilità funziona su tutte le versioni testate. Allora...

CVE-2019-8561

CVE-2019-8561 Exploit di prova di concetto per CVE-2019-8561 scoperto da Jaron Bradley @jbradley89 Corretto in macOS 10.14.4. Questo script sfrutta un bug TOCTOU in installer che consente l'esecuzione di codice come root. Vedi il talk di Jaron all'Objective By the Sea v2 "Bad Things in Small...

dyen

dyen dyen carica una dylib Mach-O in memoria usando la Python stock di macOS e chiama un entry point esportato senza dlopen su quella dylib. L'obiettivo è che l'immagine non sia mai un file standalone sul target e non venga mai registrata con dyld. di cenobyte [email protected] 2026...

CVE-2023-22524

إثبات المفهوم لثغرة تنفيذ التعليمات البرمجية عن بُعد في Atlassian Companion CVE-2023-22524 نظرة عامة يحتوي هذا المستودع على إثبات مفهوم PoC لثغرة تنفيذ التعليمات البرمجية عن بُعد التي تم اكتشافها مؤخرًا في تطبيق Atlassian Companion لنظام macOS، والمعروفة باسم CVE-2023-22524. تسمح هذه المشكلة الحر...

CVE-2026-79204

UI misrepresentation in Input in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-64705

A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.7, macOS Sonoma 14.8.7. An app may be able to cause unexpected system termination or write kernel memory...

CVE-2026-43670

A Content Security Policy bypass was addressed with improved enforcement in AudioWorklet contexts. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5. Processing maliciously crafted web content may bypass Content Security Policy...