SparstanBoogie

SparstanBoogie의 기원은 iOS/iPadOS 15.2 - 16.7 RC 20H18 및 17.0에서 테스트되었다고 보고되었으나, 실제로 작동이 중단된 26.1 26.1 장치에서의 낮은 수준의 테스트가 필요하며 환영합니다. 또한 보고된 것보다 위 또는 아래의 장치에서의 테스트도 환영합니다. 이 도구가 최신 장치에서 다시 작동할 수 있으므로, 이 도구가 자신에게 작동하는지 보고하려는 선의의 사용자를 무시할 이유가 없습니다. 이 도구가 파생된 상위 프로그램에서 지원되지 않는다고 주장되었던 iOS 15.8.7과 같은 구형...

CVE-2025-43537

CVE-2025-43537 Apple 보안 공로 연구자: Al Sadman Awal Apple Product Security가 CVE-2025-43537의 책임 있는 공개에 대해 공식적으로 공로를 인정했습니다. 개요 CVE-2025-43537은 독립적인 보안 연구 중 발견되어 Apple에 책임 있게 공개된 보안 취약점입니다. Apple은 이 보고를 조사하고 보안 수정을 구현했으며, CVE-2025-43537을 지정하고 공식 보안 권고를 통해 해당 기여를 공개적으로 인정했습니다. 이 저장소는 이 취약점과 관련된 공개 정보, 공급...

CVE-2026-84609

A permissions issue exists in several Apple operating systems, including iOS 27 , iPadOS 27 , macOS Golden Gate 27 , macOS Sequoia 15.8 , macOS Tahoe 26.7 , tvOS 27 , visionOS 27 , and watchOS 27 . The root cause is related to insufficient path validation , which could allow an application to mod...

CVE-2026-86886: Improper Limitation of a Pathname to a Restricted Directory

A path traversal issue was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, watchOS 27. An app may be able to modify protected system files...

PT-2026-91687

Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.7 iPadOS versions prior to 26.7 iOS versions prior to 27 iPadOS versions prior to 27 watchOS versions prior to 27 Description A path traversal issue exists due to insufficient input validation. This flaw allows an...

dotnet: .NET: Local tampering via improper link resolution

A flaw was found in .NET. This vulnerability, stemming from improper link resolution before file access, allows an authorized local attacker to perform tampering. This could lead to unauthorized modification of data or system files...

PT-2026-46247

Name of the Vulnerable Software and Affected Versions GNCC GP5 version 7.1.76 Description A lack of runtime integrity allows physically-proximate attackers to bypass file system read-only protections. This enables the modification of system files and binaries for the duration of a boot session...

CVE-2026-36180

A lack of runtime integrity in GNCC GP5 v7.1.76 allows physically-proximate attackers to bypass file system read-only protections and modify system files and binaries for the duration of a boot session via a bind-mount attack...

CVE-2025-43537: Improper Limitation of a Pathname to a Restricted Directory

A path handling issue was addressed with improved validation. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.2 and iPadOS 26.2. Restoring a maliciously crafted backup file may lead to modification of protected system files...

EUVD-1999-1468

Malware in sbrugna...

EUVD-2015-0541

Malware in sbrugna...

EUVD-2022-31238

Malicious code in bioql PyPI...

EUVD-2025-23076

Malicious code in bioql PyPI...

EUVD-2024-45786

Malicious code in bioql PyPI...

PT-2025-31322 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.6 macOS versions prior to 14.7.7 macOS versions prior to 13.7.7 Description: A permissions issue was addressed with additional restrictions. A malicious app with root privileges may be able to modify the contents of...

CVE-2024-44258

This issue was addressed with improved handling of symlinks. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS 18.1, tvOS 18.1, visionOS 2.1. Restoring a maliciously crafted backup file may lead to modification of protected system files...

CVE-2024-44252

A logic issue was addressed with improved file handling. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS 18.1, tvOS 18.1, visionOS 2.1. Restoring a maliciously crafted backup file may lead to modification of protected system files...

CVE-2020-10263

An issue was discovered on XIAOMI XIAOAI speaker Pro LX06 1.52.4. Attackers can get root shell by accessing the UART interface and then they can i read Wi-Fi SSID or password, ii read the dialogue text files between users and XIAOMI XIAOAI speaker Pro LX06, iii use Text-To-Speech tools pretend...

CVE-2025-31187

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to modify protected parts of the file system...

CVE-2024-54525: Unrestricted Upload of File with Dangerous Type

A logic issue was addressed with improved file handling. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, tvOS 18.2, visionOS 2.2, watchOS 11.2. Restoring a maliciously crafted backup file may lead to modification of protected system files...