iOSForensic

iOSForensic iosForensic é uma ferramenta python para auxiliar na análise forense em iOS. Ele obtém arquivos, logs, extrai bancos de dados sqlite3 e descompacta arquivos .plist em xml. Instalação Basta clonar este repositório git e instalar as dependências. Dependências Linux OpenSSH sshpass sqlit...

parallels-plist-escape

parallels-plist-escape يحتوي هذا المستودع على استغلالات لـ CVE-2023-27327 وCVE-2023-27328، والتي يمكن استخدامها معًا للهروب من آلة افتراضية في Parallels Desktop في الإصدارات السابقة للإصدار 18.1.1. كما يحتوي أيضًا على كود لوحدة نواة مطلوبة، في prlmod، والتي يمكن استخدامها لإرسال طلبات Toolgate...

osx-password-dumper

🍎 🔓 Script de Dump de Senhas OSX Visão Geral Um script bash para recuperar arquivos .plist do usuário em um sistema macOS e converter os dados internos em um formato de hash quebrável. para usar com John The Ripper ou Hashcat Útil para CTFs/Pentesting/Red Teaming em sistemas macOS. Pré-requisitos...

CVE-2026-6666-XPC-Service-NSKeyedUnarchiver-Deserialization-Attack-macOS-iOS-simulation-

CVE-2026-6666 – Ataque de Desserialização NSKeyedUnarchiver em Serviço XPC simulação macOS/iOS Código do programa simulação em Python root@kitploit: !/usr/bin/env python3 vulnerablexpcservice.py - Simulated XPC service using unsafe plist deserialization import plistlib, subprocess, socketserver,...

CVE-2022-48565-POC

CVE-2022-48565 PoC परिचय यह एक प्रूफ ऑफ कॉन्सेप्ट PoC है जो कमजोरी CVE-2022-48565 को प्रदर्शित करता है, जो Python में Plist फ़ाइलों के असुरक्षित डिसीरियलाइज़ेशन पर आधारित है। विशेष रूप से तैयार की गई प्रॉपर्टी लिस्ट Plist फ़ाइलों को प्रोसेस करके, एक हमलावर लक्ष्य सिस्टम पर मनमाना कोड निष्पादित कर...

Astra Linux – Vulnerability in Python 3.11

When loading a plist file, the plistlib module reads data in a size specified by the file itself. This means that a malicious file can cause out-of-memory OOM and denial-of-service DoS issues...

RLSA-2026:19177 Important: python3.12 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

Astra Linux – Vulnerabilities in Python 2.7, Python 3.7, and Pypy

A XXE issue was discovered in Python through version 3.9.1. The plistlib module no longer accepts entity declarations in XML plist files to prevent XML vulnerabilities...

Astra Linux – Vulnerability in Python 3.7

The readints function in plistlib.py in Python from version 3.9.1 is vulnerable to a potential Distributed Denial-of-Service DoS attack due to CPU and RAM exhaustion when processing malformed Apple Property List files in binary format...

cpython: Out-of-memory when loading Plist

A flaw was found in the plistlib module in the Python standard library. The amount of data to read from a Plist file is specified in the file itself. This issue allows a specially crafted Plist file to cause an application to allocate a large amount of memory, potentially resulting in allocations...

Important: python3.12 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

RHEL 10 : python3.12 (RHSA-2026:19064)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:19064 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level...

ALSA-2026:19064 Important: python3.12 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

RLSA-2026:10950 Important: python3.12 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

RockyLinux 8 : python3.12 (RLSA-2026:10950)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:10950 advisory. expat: libexpat in Expat allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing CVE-2025-59375...

Important: Red Hat Security Advisory: python3.12 security update

An update for python3.12 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...

cpython: Out-of-memory when loading Plist

A flaw was found in the plistlib module in the Python standard library. The amount of data to read from a Plist file is specified in the file itself. This issue allows a specially crafted Plist file to cause an application to allocate a large amount of memory, potentially resulting in allocations...

ALSA-2026:10950 Important: python3.12 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

Important: python3.12 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

RHEL 8 : python3.12 (RHSA-2026:10950)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:10950 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level...