Advanced XSS Exploitation - How to Record User Audio

In this paper, the author teaches advanced persistent cross site scripting techniques that can be used to record client audio conversations and send them to an external server. The paper is primarily focusing on a pentesting perspective but also discusses mitigations. Written in Brazilian...

CVE-2025-30443: Exposure of Sensitive Information to an Unauthorized Actor

A privacy issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.4, macOS Sequoia 15.5, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to access user-sensitive data...

CVE-2025-31188: Concurrent Execution using Shared Resource with Improper Synchronization

A race condition was addressed with additional validation. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to bypass Privacy preferences...

CVE-2025-24095: Authentication Bypass Using an Alternate Path or Channel

This issue was addressed with additional entitlement checks. This issue is fixed in iOS 18.4 and iPadOS 18.4, visionOS 2.4. An app may be able to bypass Privacy preferences...

Apple iOS和Apple iPadOS 安全漏洞

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A security vulnerability exists in Apple iOS and Apple iPadOS that originates from an application that may bypass privacy...

Apple iOS和Apple iPadOS 安全漏洞

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A security vulnerability exists in Apple iOS and Apple iPadOS that arises from privacy concerns and could result in access...

PT-2025-13941 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.4 Description: A privacy issue was addressed with improved private data redaction for log entries. A sandboxed app may be able to access sensitive user data in system logs. Recommendations: For versions prior to 15....

PT-2025-13942 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.4 Description: A privacy issue was addressed by moving sensitive data to a protected location. An app may be able to observe unprotected user data. Recommendations: For versions prior to 15.4, update to macOS Sequoi...

PT-2025-55365

Name of the Vulnerable Software and Affected Versions macOS Sequoia versions prior to 15.4 Description A privacy issue exists where an application may be able to access sensitive user data. Recommendations Update to macOS Sequoia 15.4...

PT-2026-3266

Name of the Vulnerable Software and Affected Versions Xcode versions prior to 16.3 Description A permissions issue existed due to insufficient restrictions, potentially allowing an application to bypass Privacy preferences. Recommendations Update to Xcode version 16.3...

Apple macOS 安全漏洞

Apple macOS is a specialized operating system developed for Mac computers by Apple USA. A security vulnerability exists in Apple macOS that stems from privacy concerns and could lead to accessing user contact information...

PT-2025-13907 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.4 Description: A privacy issue was addressed with improved private data redaction for log entries. An app may be able to access information about a user's contacts. Recommendations: For versions prior to 15.4, updat...

Apple macOS 安全漏洞

Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A security vulnerability exists in Apple macOS Sequoia that stems from an application that may be able to bypass privacy preferences...

PT-2025-14003 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.7.5 macOS versions prior to 14.7.5 macOS versions prior to 15.4 Description: A race condition was addressed with additional validation. This issue allows an app to potentially bypass Privacy preferences...

CVE-2025-24214: Improper Access Control

A privacy issue was addressed by not logging contents of text fields. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, tvOS 18.4, visionOS 2.4, watchOS 11.4. An app may be able to access sensitive user data...

Apple iOS和Apple iPadOS 安全漏洞

Apple iOS and Apple iPadOS are both products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A security vulnerability exists in Apple iOS and Apple iPadOS, which stems from insufficient state management and cou...

PT-2025-13870 · Apple · Visionos +2

Name of the Vulnerable Software and Affected Versions: visionOS versions prior to 2.4 iOS versions prior to 18.4 iPadOS versions prior to 18.4 Description: The issue allows an app to bypass Privacy preferences. This is achieved by addressing the problem with additional entitlement checks...

Apple macOS 安全漏洞

Apple macOS is a suite of specialized operating systems from the U.S.-based Apple Inc. developed specifically for Mac computers. A security vulnerability exists in Apple macOS that stems from a privacy issue that could cause a sandboxed application to access sensitive user data in the system log...

CVE-2025-24263: Exposure of Sensitive Information to an Unauthorized Actor

A privacy issue was addressed by moving sensitive data to a protected location. This issue is fixed in macOS Sequoia 15.4. An app may be able to observe unprotected user data...

Apple macOS 安全漏洞

Apple macOS is a set of specialized operating systems developed for Mac computers by Apple, Inc. A security vulnerability exists in Apple macOS that stems from privacy concerns and could cause applications to observe unprotected user data...