osx
osx 相关平台内容索引。Exploit Database / Exploits for Penetration Testers, Researchers, and Ethical Hackers。聚合漏洞利用代码、PoC 与研究资料。
Apple Mac OS X + Safari – Local Javascript Quarantine Bypass
Title: Mac OS X Local Javascript Quarantine Bypass
HideMyAss Pro VPN Client for OS X 2.2.7.0 – Local Privilege Escalation
Source: https://www.securify.nl/advisory/SFY20170402/multiple_local_privilege_escalation_vulnerabilities_in_hidemyass...
Horos 2.1.0 Web Portal – Directory Traversal
Horos 2.1.0 Web Portal Remote Information Disclosure Exploit
Horos 2.1.0 DICOM Medical Image Viewer – Denial of Service
#!/usr/bin/env python
Apple OS X/iOS Kernel – IOSurface Use-After-Free
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=831
Apple OS X Kernel – IOBluetoothFamily.kext Use-After-Free
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=830
The Unarchiver 3.11.1 – ‘.tar.Z’ Crash (PoC)
# Exploit Title: The Unarchiver 3.11.1 '.tar.Z' Local Crash PoC
VOX Music Player 2.8.8 – ‘.pls’ Denial of Service
# Exploit Title: VOX Music Player 2.8.8 '.pls' Local Crash PoC
Airmail 3.0.2 – Cross-Site Scripting
Airmail is a popular email client on iOS and OS X.
Apple Mac OSX Kernel – GeForce GPU Driver Stack Buffer Overflow
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=724
Apple Mac OSX Kernel – Use-After-Free Due to Bad Locking in IOAcceleratorFamily2
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=772
Apple Mac OSX Kernel – Out-of-Bounds Read of Object Pointer Due to Insufficient Checks in Raw Cast to enum Type
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=774
Apple Mac OSX Kernel – Null Pointer Dereference in IOAudioEngine
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=776
Apple Mac OSX Kernel – NULL Dereference in CoreCaptureResponder Due to Unchecked Return Value
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=777
Apple Mac OSX Kernel – NULL Dereference in IOAccelSharedUserClient2::page_off_resource
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=778
Apple Mac OSX Kernel – Null Pointer Dereference in AppleGraphicsDeviceControl
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=782
Apple Mac OSX Kernel – Null Pointer Dereference in AppleMuxControl.kext
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=783
Apple Mac OSX Kernel – Null Pointer Dereference in nvCommandQueue::GetHandleIndex in GeForce.kext
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=784
Apple QuickTime – ‘.mov’ Parsing Memory Corruption
#####################################################################################
Mach Race OSX – Local Privilege Escalation
Source: https://github.com/gdbinit/mach_race
Apple Intel HD 3000 Graphics Driver 10.0.0 – Local Privilege Escalation
░▀█▀░█▀█░█░░░█▀█░█▀▀░░░█░█░█░█░█░░░█▀█░█▀▄░█▀▀░█░█░
Apple Mac OSX Kernel – Use-After-Free and Double Delete Due to Incorrect Locking in Intel GPU Driver
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=708
Apple Mac OSX Kernel – Unchecked Array Index Used to Read Object Pointer Then Call Virtual Method in Nvidia Geforce Driver
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=709
Apple Mac OSX Kernel – AppleKeyStore Use-After-Free
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=710
Apple Mac OSX Kernel – Code Execution Due to Lack of Bounds Checking in AppleUSBPipe::Abort
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=728
Apple Mac OSX – ‘IOHDIXControllerUserClient::convertClient’ Buffer Integer Overflow
Source: https://code.google.com/p/google-security-research/issues/detail?id=511
Apple Mac OSX – OSMetaClassBase::safeMetaCast in IOAccelContext2::connectClient NULL Dereference
Source: https://code.google.com/p/google-security-research/issues/detail?id=512
Apple Mac OSX – IOSCSIPeripheralDeviceType00 Userclient Type 12 Kernel NULL Dereference
Source: https://code.google.com/p/google-security-research/issues/detail?id=562
Apple Mac OSX Kernel – IOAccelDisplayPipeUserClient2 Use-After-Free
Source: https://code.google.com/p/google-security-research/issues/detail?id=565
Apple Mac OSX Kernel – IOAccelMemoryInfoUserClient Use-After-Free
Source: https://code.google.com/p/google-security-research/issues/detail?id=566
Apple Mac OSX Kernel – no-more-senders Use-After-Free
Source: https://code.google.com/p/google-security-research/issues/detail?id=567
Apple Mac OSX – ‘IOBluetoothHCIUserClient’ Arbitrary Kernel Code Execution
Source: https://code.google.com/p/google-security-research/issues/detail?id=569
Apple Mac OSX – IOBluetoothHCIPacketLogUserClient Memory Corruption
Source: https://code.google.com/p/google-security-research/issues/detail?id=572
Apple Mac OSX Kernel – Hypervisor Driver Use-After-Free
Source: https://code.google.com/p/google-security-research/issues/detail?id=580
Apple Mac OSX – ‘IntelAccelerator::gstqConfigure’ Kernel NULL Dereference
Source: https://code.google.com/p/google-security-research/issues/detail?id=595
Apple Mac OSX – ‘gst_configure’ Kernel Buffer Overflow
Source: https://code.google.com/p/google-security-research/issues/detail?id=596
Apple Mac OSX – io_service_close Use-After-Free
Source: https://code.google.com/p/google-security-research/issues/detail?id=597
Apple Mac OSX / iOS – Unsandboxable Kernel Code Exection Due to iokit Double Release in IOKit
Source: https://code.google.com/p/google-security-research/issues/detail?id=620
Apple Mac OSX 10.11 – FTS Deep Structure of the FileSystem Buffer Overflow
MacOS X 10.11 FTS Deep structure of the file system Buffer Overflow
Apple Mac OSX 10.9.5/10.10.5 – ‘rsh/libmalloc’ Local Privilege Escalation
# CVE-2015-5889: issetugid() + rsh + libmalloc osx local root