71 matches found
CVE-2023-32422-a-macOS-TCC-bypass-in-sqlite
CVE-2023-32422-a-macOS-TCC-bypass-in-sqlite...
CVE-2023-32407-a-macOS-TCC-bypass-in-Metal
CVE-2023-32407-a-macOS-TCC-bypass-in-Metal...
hm-surf
HM-Surf evaluator يُقيّم قابلية التأثر بـ CVE-2024-44133 لمتصفحات macOS الشائعة. يحتوي أيضًا على HTML يلتقط لقطة شاشة ويقوم بتنزيلها مع استخراج الموقع. الاستخدام - evaluator لتشغيل المُقيم، الذي يُقيّم CVE-2024-44133 على جميع متصفحات macOS الشائعة، قم بتشغيل: root@kitploit: python3 -m pip install...
POC
POC 연구 목적으로만 사용하세요! 제가 발견한 취약점에 대한 POC & 익스플로잇 공개 모음집입니다. CVE-2022-22583 PackageKit : 애플리케이션이 제한된 파일에 접근할 수 있음 SIP 우회 CVE-2022-26690 PackageKit : 악성 애플리케이션이 파일 시스템의 보호된 부분을 수정할 수 있음 SIP 우회 CVE-2022-32800 PackageKit : 앱이 파일 시스템의 보호된 부분을 수정할 수 있음 SIP 우회 CVE-2022-26728 SoftwareUpdate : 악성 애플리케이션이 제한...
CVE-2023-38571-a-macOS-TCC-bypass-in-Music-and-TV
कार्यकारी सारांश macOS Music और TV एक असुरक्षित नाम परिवर्तन करते हैं जिसके परिणामस्वरूप उपयोगकर्ता के TCC.db पर पूर्ण नियंत्रण प्राप्त करके FDA प्राप्त होता है। मैंने इस बग को प्रत्येक ऐप के लिए अलग-अलग टिकटों में रिपोर्ट किया, यदि लागू हो तो विलय करने में संकोच न करें। अंतर्निहित समस्या यह है क...
MSF-screenrecord-on-MacOS
MSF-screenrecord-on-MacOS !!! Эта уязвимость была одновременно обнаружена или присвоена Судхакару Мутумани из Primefort Private Limited, Хием Трану и указана как CVE-2022-22600. Несмотря на то, что я уже писал Apple об этом ещё в 2021 году. Затронутые версии Будучи студентом, я имею ограниченный...
CVE-2023-26818
إخلاء مسؤولية تم إنشاء هذا الاستغلال فقط لأغراض البحث وتطوير تقنيات دفاعية فعّالة. وليس المقصود استخدامه في أي أنشطة خبيثة أو غير مصرح بها. يخلي المؤلف ومالك البرنامج مسؤوليتهما عن أي إساءة استخدام أو ضرر ناتج عن هذا البرنامج. يُطلب من المستخدمين استخدام هذا البرنامج بمسؤولية ووفقًا للقوانين...
CVE-2020-9934
CVE-2020-9934 이 개념 증명PoC은 간단한 Swift 프로그램으로, 자기 자신과 터미널에 모든 kTCCService 권한tccd에서 가져옴을 부여한 후 다음 네 가지 작업을 수행합니다: TCC 보호 디렉토리에 라는 이름의 파일 생성 TCC 보호 디렉토리 내에서 해당 파일의 데이터 읽기 TCC 디렉토리의 모든 파일 목록 표시 포함 TCC 보호 디렉토리에서 파일 제거 사용법: ./bypasstc 전체 글은 Medium에서 확인하세요...
CVE-2025-24204
CVE-2025-24204 À propos CVE-2025-24204 est une vulnérabilité qui permet de lire la mémoire de tout processus sur les systèmes macOS avec SIP activé. La cause première de cette vulnérabilité provient de l'ajout d'une autorisation excessivement puissante com.apple.system-task-ports.read au binaire...
CVE-2022-26726-POC
CVE-2022-26726 Versioni Affette Come studente, ho accesso limitato ai dispositivi su cui posso testare questa vulnerabilità. Le versioni che ho testato finora sono MacOS 12.3.1, MacOS 12.3, MacOS 12.0, MacOS 10.15.7, e MacOS 11.6.1. La vulnerabilità funziona su tutte le versioni testate. Allora...
CVE-2026-39309
CVE-2026-39309 affects Trilium Notes before v0.102.2. The Electron configuration allows a RunAsNode fuse to launch the app in a special Node.js mode (-e) that can execute arbitrary commands with Trilium’s permissions, enabling a local attacker to spoof macOS TCC prompts. An attacker could trigger...
EUVD-2026-31008
Trilium Notes is a cross-platform, hierarchical note taking application focused on building large personal knowledge bases. In versions 0.102.1 and prior, the Electron configuration is vulnerable to TCC Bypass via Prompt Spoofing, allowing local attackers to trigger misleading macOS permission...
CVE-2026-39309
Trilium Notes is a cross-platform, hierarchical note taking application focused on building large personal knowledge bases. In versions 0.102.1 and prior, the Electron configuration is vulnerable to TCC Bypass via Prompt Spoofing, allowing local attackers to trigger misleading macOS permission...
CVE-2025-15523 TCC Bypass via Inherited Permissions in Bundled Interpreter in Inkscape.app
MacOS version of Inkscape bundles a Python interpreter that inherits the Transparency, Consent, and Control TCC permissions granted by the user to the main application bundle. An attacker with local user access can invoke this interpreter with arbitrary commands or scripts, leveraging the...
CVE-2025-1398
Mattermost Desktop App versions =5.10.0 explicitly declared unnecessary macOS entitlements which allows an attacker with remote access to bypass Transparency, Consent, and Control TCC via code injection...
CVE-2025-64723 Arduino IDE for macOS has TCC Bypass via Dynamic Library Injection
Arduino IDE is an integrated development environment. Prior to version 2.3.7, Arduino IDE for macOS was configured with overly permissive security entitlements that could bypass macOS Hardened Runtime protections. This configuration allows attackers to inject malicious dynamic libraries into the...
CVE-2025-64723 Arduino IDE for macOS has TCC Bypass via Dynamic Library Injection
Arduino IDE is an integrated development environment. Prior to version 2.3.7, Arduino IDE for macOS was configured with overly permissive security entitlements that could bypass macOS Hardened Runtime protections. This configuration allows attackers to inject malicious dynamic libraries into the...
Libre Office TCC Bypass via Bundled Interpreter vulnerability (Dec 2025) - Mac OS X
Libre Office is prone to a tcc bypass via bundled interpreter vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2025-14714 TCC Bypass via Inherited Permissions in Bundled Interpreter
An Authentication Bypass vulnerability existed where the application bundled an interpreter Python that inherits the Transparency, Consent, and Control TCC permissions granted by the user to the main application bundle By executing the bundled interpreter directly the attacker's scripts run with...