iOSForensic

iOSForensic iosForensic ist ein Python-Tool zur Unterstützung bei forensischen Analysen auf iOS. Es sammelt Dateien, Logs, extrahiert sqlite3-Datenbanken und dekomprimiert .plist-Dateien in XML. Installation Klonen Sie einfach dieses Git-Repository und installieren Sie die Abhängigkeiten...

parallels-plist-escape

parallels-plist-escape Questa repository contiene exploit per CVE-2023-27327 e CVE-2023-27328, che possono essere utilizzati insieme per evadere da una macchina virtuale Parallels Desktop, precedente a Parallels Desktop 18.1.1. Contiene anche il codice per un modulo kernel necessario, in prlmod,...

osx-password-dumper

🍎 🔓 OSX Passwort-Dumper-Skript Übersicht Ein Bash-Skript zum Abrufen der .plist-Dateien eines Benutzers auf einem macOS-System und zum Konvertieren der darin enthaltenen Daten in ein crackbares Hash-Format. zur Verwendung mit John The Ripper oder Hashcat Nützlich für CTFs/Pentesting/Red Teaming a...

CVE-2026-6666-XPC-Service-NSKeyedUnarchiver-Deserialization-Attack-macOS-iOS-simulation-

CVE-2026-6666 – Attacco di deserializzazione NSKeyedUnarchiver al servizio XPC simulazione macOS/iOS Codice del programma simulazione Python root@kitploit: !/usr/bin/env python3 vulnerablexpcservice.py - Simulated XPC service using unsafe plist deserialization import plistlib, subprocess,...

CVE-2022-48565-POC

CVE-2022-48565 PoC परिचय यह एक प्रूफ ऑफ कॉन्सेप्ट PoC है जो कमजोरी CVE-2022-48565 को प्रदर्शित करता है, जो Python में Plist फ़ाइलों के असुरक्षित डिसीरियलाइज़ेशन पर आधारित है। विशेष रूप से तैयार की गई प्रॉपर्टी लिस्ट Plist फ़ाइलों को प्रोसेस करके, एक हमलावर लक्ष्य सिस्टम पर मनमाना कोड निष्पादित कर...

Astra Linux – Vulnerability in Python 3.11

When loading a plist file, the plistlib module reads data in a size specified by the file itself. This means that a malicious file can cause out-of-memory OOM and denial-of-service DoS issues...

RLSA-2026:19177 Important: python3.12 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

Astra Linux – Vulnerabilities in Python 2.7, Python 3.7, and Pypy

A XXE issue was discovered in Python through version 3.9.1. The plistlib module no longer accepts entity declarations in XML plist files to prevent XML vulnerabilities...

Astra Linux – Vulnerability in Python 3.7

The readints function in plistlib.py in Python from version 3.9.1 is vulnerable to a potential Distributed Denial-of-Service DoS attack due to CPU and RAM exhaustion when processing malformed Apple Property List files in binary format...

cpython: Out-of-memory when loading Plist

A flaw was found in the plistlib module in the Python standard library. The amount of data to read from a Plist file is specified in the file itself. This issue allows a specially crafted Plist file to cause an application to allocate a large amount of memory, potentially resulting in allocations...

Important: python3.12 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

RHEL 10 : python3.12 (RHSA-2026:19064)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:19064 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level...

ALSA-2026:19064 Important: python3.12 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

RLSA-2026:10950 Important: python3.12 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

RockyLinux 8 : python3.12 (RLSA-2026:10950)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:10950 advisory. expat: libexpat in Expat allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing CVE-2025-59375...

Important: Red Hat Security Advisory: python3.12 security update

An update for python3.12 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...

cpython: Out-of-memory when loading Plist

A flaw was found in the plistlib module in the Python standard library. The amount of data to read from a Plist file is specified in the file itself. This issue allows a specially crafted Plist file to cause an application to allocate a large amount of memory, potentially resulting in allocations...

ALSA-2026:10950 Important: python3.12 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

Important: python3.12 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

RHEL 8 : python3.12 (RHSA-2026:10950)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:10950 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level...