815 matches found
CVE-2026-65393
This vulnerability affects Apple Xcode and macOS Golden Gate , where a permissions issue allowed an application to access user-sensitive data through insufficient validation. The flaw was resolved with improved validation of permissions, fixing the issue in Xcode 27 and macOS Golden Gate 27 . No ...
EUVD-2026-78118
A permissions issue was addressed with improved validation. This issue is fixed in Xcode 27, macOS Golden Gate 27. An app may be able to access user-sensitive data...
darling
Darling Darling is a runtime environment for macOS applications. Please note that most GUI applications will not run at the moment. Download Packages for some distributions are available for download under releases. Build Instructions For build instructions, visit Darling Docs. Prefixes Darling h...
ios-mac-app
适用于 iOS 和 macOS 的 Proton VPN 版权所有 c 2025 Proton Technologies AG 依赖项 本项目使用 Swift Package Manager 管理所有依赖。在运行任何目标之前，请允许 Xcode 解析包。 第三方依赖 ACKNOWLEDGEMENTS.md 设置 在您的机器上启用 Git LFS 克隆此仓库 确保您克隆子模块（git submodule init + git submodule update） 使用 brew bundle 安装 Homebrew 依赖 目前您需要使用 Xcode 14.x 使用付费的 Apple...
ios-malicious-bithunter
iOS Malicious Bit Hunter Abstract iOS Malicious Bit Hunter is a malicious plug-in detection engine for iOS applications. It can analyze the head of the macho file of the injected dylib dynamic library based on runtime, and can perform behavior analysis through interface input characteristics to...
sdks
theos/sdks このリポジトリには、プライベートシンボルを含むパッチ適用済みのiOS SDKが含まれています。これらはXcode 7.3およびiOS 9.3 SDK以降、公式SDKから削除されました。 Theosで使用するには、このリポジトリをダウンロードし、展開して、必要なSDKを$THEOS/sdks/にコピーしてください。 createpatchedsdk.shとinoahdevのtbd v2.2を使用し、iOS Device Supportディレクトリから取得したバイナリ、またはIPSWから抽出したバイナリを使用して生成されています。...
CVE-2024-23298.app
CVE-2024-23298 的 PoC 只需打开 Xcode 15.2 并克隆此项目...
CVE-2026-7416
A vulnerability was found in PolarVista xcode-mcp-server 1.0.0. This issue affects the function buildproject/runtests of the file src/index.ts of the component MCP Interface. The manipulation of the argument Request results in os command injection. The attack may be launched remotely. The exploit...
CVE-2026-7416
A vulnerability was found in PolarVista xcode-mcp-server 1.0.0. This issue affects the function buildproject/runtests of the file src/index.ts of the component MCP Interface. The manipulation of the argument Request results in os command injection. The attack may be launched remotely. The exploit...
CVE-2026-7416
A vulnerability was found in PolarVista xcode-mcp-server 1.0.0. This issue affects the function buildproject/runtests of the file src/index.ts of the component MCP Interface. The manipulation of the argument Request results in os command injection. The attack may be launched remotely. The exploit...
CVE-2026-7416 PolarVista xcode-mcp-server MCP index.ts run_tests os command injection
A vulnerability was found in PolarVista xcode-mcp-server 1.0.0. This issue affects the function buildproject/runtests of the file src/index.ts of the component MCP Interface. The manipulation of the argument Request results in os command injection. The attack may be launched remotely. The exploit...
CVE-2026-7416
Summary: CVE-2026-7416 affects PolarVista xcode-mcp-server 1.0.0, specifically the MCP Interface’s build_project/run_tests in src/index.ts. The vulnerability arises from manipulating the Request argument, enabling an OS command injection. The advisory notes remote feasibility and public disclosur...
CVE-2026-7416 PolarVista xcode-mcp-server MCP index.ts run_tests os command injection
A vulnerability was found in PolarVista xcode-mcp-server 1.0.0. This issue affects the function buildproject/runtests of the file src/index.ts of the component MCP Interface. The manipulation of the argument Request results in os command injection. The attack may be launched remotely. The exploit...
PT-2026-36017
Name of the Vulnerable Software and Affected Versions PolarVista xcode-mcp-server version 1.0.0 Description An OS command injection issue exists in the MCP Interface component within the build project/run tests function of the src/index.ts file. This flaw allows a remote attacker to execute...
Xcode MCP Server 命令注入漏洞
Xcode MCP Server is an Xcode-integrated context-based protocol server developed by R. Huijts. Version 1.0.0 of Xcode MCP Server contains a command injection vulnerability. This vulnerability arises from the Request operation in the buildproject/runtests function within the src/index.ts file, whic...
Apple Security Advisory 03-24-2026-10
Apple Security Advisory 03-24-2026-10 - Xcode 26.4 addresses an out of bounds read vulnerabilities...
CVE-2026-28889
A permissions issue was addressed with additional restrictions. This issue is fixed in Xcode 26.4. An app may be able to read arbitrary files as root...
CVE-2026-28890
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Xcode 26.4. An app may be able to cause unexpected system termination...