XNU kernel UaF due to lack of locking in set_dp_control_port (CVE-2016-7644)

setdpcontrolport is a MIG method on the hostprivport so this bug is a root-kernel escalation. kernreturnt setdpcontrolport hostprivt hostpriv, ipcportt controlport if hostpriv == HOSTPRIVNULL return KERNINVALIDHOST; if IPVALIDdynamicpagercontrolport ipcportreleasesenddynamicpagercontrolport;...

Apple Mac OSX - Kernel Exploitable Null Pointer Dereference in AppleGraphicsDeviceControl

Exploit for macOS platform in category dos / poc / Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=782 AppleGraphicsDeviceControlClient doesn't check that its pointer to its IOService at this+0xd8 is non-null before using it in all external methods. We can set this pointer to NU...

Apple Mac OSX / iOS Kernel - UAF Racing getProperty on IOHDIXController and testNetBootMethod on IOHDIXControllerUserClient

/ Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=732 This is perhaps a more interesting UaF than just racing testNetBootMethod calls as there looks to be a path to getting free'd memory disclosed back to userspace. Although the copyProperty macro used by...

Real Drift Car Racing Free - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Real Drift Car Racing Free published at the 'play' market has multiple vulnerabilities...

Hill Climb Racing - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Hill Climb Racing published at the 'play' market has multiple vulnerabilities...

Bike Racing 3D - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Bike Racing 3D published at the 'play' market has multiple vulnerabilities...

Real Racing 3 - Customized SSL, Dangerous filesystem permissions, Hardcoded secrets vulnerabilities

HackApp vulnerability scanner discovered that application Real Racing 3 published at the 'play' market has multiple vulnerabilities...

Racing Fever - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Racing Fever published at the 'play' market has multiple vulnerabilities...

Racing in Car - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Racing in Car published at the 'play' market has multiple vulnerabilities...

Number Racing - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Number Racing published at the 'play' market has multiple vulnerabilities...

Dinky Racing FREE - External URLs, SD-card access, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Dinky Racing FREE published at the 'play' market has multiple vulnerabilities...

Dino Run 2 - Dinosaur Racing - Base64 encoded String, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Dino Run 2 - Dinosaur Racing published at the 'play' market has multiple vulnerabilities...

Truck Racing Game for Kids Kid - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Truck Racing Game for Kids Kid published at the 'play' market has multiple vulnerabilities...

Offroad Racing - Base64 encoded String, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Offroad Racing published at the 'play' market has multiple vulnerabilities...

Fun Drift Racing For Kids - Base64 encoded String, Customized SSL, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Fun Drift Racing For Kids published at the 'play' market has multiple vulnerabilities...

Halloween Town Racing - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Halloween Town Racing published at the 'play' market has multiple vulnerabilities...

Winter Racing - Holiday Fun! - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Winter Racing - Holiday Fun! published at the 'play' market has multiple vulnerabilities...

Fun Kid Racing - Safari Cars - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Fun Kid Racing - Safari Cars published at the 'play' market has multiple vulnerabilities...

Highway Rally: Fast Car Racing - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Highway Rally: Fast Car Racing published at the 'play' market has multiple vulnerabilities...

Fun Kid Racing - Tropical Isle - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Fun Kid Racing - Tropical Isle published at the 'play' market has multiple vulnerabilities...