Android-Disassembler

Android-Disassembler CodeFactor 在你的手机上分析恶意应用 维护状态 维护工作已恢复，但项目仍处于恢复和现代化阶段。 构建前需要先初始化 Git 子模块。 在现代化 Android 上，默认的打开/导入/导出流程现在优先使用 SAF 契约。 高级导入 是为需要 root、原始文件系统和已安装应用浏览的高级用户提供的独立路径。 QUERYALLPACKAGES 保留用于高级用户的已安装应用来源，而非默认的 SAF 流程。 问题分类和维护文档位于 docs/maintenance/ 下。 存储模型 选择文件 使用 Android 的 SAF 文档选择器。 导出项...

ServiceCheater

ServiceCheater Poc of CVE-2020-0113 & CVE-2020-0108 Análisis de vulnerabilidad de escalada de privilegios del servicio en primer plano de Android Antecedentes de la vulnerabilidad En el parche de AOSP de 2020-08, se reveló una vulnerabilidad en el marco AMS, con el identificador CVE-2020-0108,...

CVE-2021-33699_Task_Hijacking

CVE-2021-33699TaskHijacking ¿Qué es? Una aplicación atacante y una aplicación víctima para practicar la vulnerabilidad CVE-2021-33699 Task Hijacking. Referencia https://naro-security.tistory.com/55...

CVE-2026-86911

This issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. A malicious app may be able to bypass clickjacking protections for secure prompts...

CVE-2026-65381

A validation issue existed in the entitlement verification. This issue was addressed with improved validation of the process entitlement. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A malicious app may be able to break out of its sandbox...

EUVD-2026-77936

A race condition was addressed with improved locking. This issue is fixed in macOS Tahoe 26.6. A malicious app may be able to gain root privileges...

CVE-2026-84586

CVE-2026-84586 is an information disclosure vulnerability in Apple's Apple Account component, affecting macOS Golden Gate 27 and watchOS 27 . The root cause is insufficient state management , which allows a malicious application to leak sensitive user information. Affected hardware includes Apple...

CVE-2026-65354

A permissions issue in Apple's operating systems allows a malicious application to potentially break out of its sandbox . This vulnerability has been addressed with additional restrictions and is officially fixed in iOS 27 , iPadOS 27 , and macOS Golden Gate 27 . While the vulnerability is confir...

CVE-2026-65381

CVE-2026-65381 affects AppleMobileFileIntegrity and CoreTypes components in macOS. The root cause is a validation issue in entitlement verification , addressed by improved validation of the process entitlement. The impact is that a malicious app may break out of its sandbox , potentially gaining ...

CVE-2026-86911

This issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. A malicious app may be able to bypass clickjacking protections for secure prompts...

CVE-2026-86911

This issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. A malicious app may be able to bypass clickjacking protections for secure prompts...

EUVD-2026-77986

This issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. A malicious app may be able to bypass clickjacking protections for secure prompts...

CVE-2026-43689

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. A malicious app may be able to gain root privileges...

CVE-2026-43689

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. A malicious app may be able to gain root privileges...

CVE-2026-43689

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. A malicious app may be able to gain root privileges...

Astra Linux – Vulnerability in Chromium

Before version 90.0.4430.212, using “after free” in Google Chrome’s payments functionality allowed an attacker who convinced a user to install a malicious payment app to potentially exploit heap corruption through a crafted HTML page...

Astra Linux – Vulnerability in WebKit2GTK

A logic issue has been resolved through improved restrictions. This issue is fixed in tvOS 14.6, iOS 14.6, iPadOS 14.6, Safari 14.1.1, macOS Big Sur 11.4, and watchOS 7.5. A malicious application may be able to leak sensitive user information...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in Autofill in Google Chrome prior to 124.0.6367.60 allowed an attacker who convinced a user to install a malicious app to perform UI spoofing via a crafted app. Chromium security severity: Medium...

PT-2026-91577

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. A malicious application may be able to determine...

PT-2026-91524

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27. A malicious app may be able to break out of its sandbox...