sploits

KO | EN

gitlite — search

#javascript #ai #llm #go #linux #nodejs #java #cli #awesome-list #vue #pytorch #mcp #ios #open-source

(★ 212)

PoC

File Explorer

Download Latest Version (.zip)

- - Makefile
  - poc.m
- - .gitignore
  - exp.m
  - Makefile
  - README.md
- - .gitignore
  - exploit.m
  - Makefile
  - README.md
- - build.sh
- - .clang-format
  - .gitignore
  - build.sh
  - README.md
- - .gitignore
  - Default.png
  - escape.h
  - escape.m
  - Info.plist
  - main.html
  - Makefile
  - README.md
.clang-format
.gitignore
.gitmodules
README.md

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# sploits

| #      | Code        | Description |
|--------|-------------|-------------|
| [CVE-2018-4310](https://support.apple.com/en-us/HT209106) | [code](macOS/CVE-2018-4310-mediaremote) | MediaRemote: An access issue was addressed with additional sandbox restrictions |
| [CVE-2018-4991](https://helpx.adobe.com/security/products/creative-cloud/apsb18-12.html) | [code](3rd-party/adobe/CVE-2018-4991) | Adobe Creative Cloud Desktop Application versions 4.4.1.298 and earlier have an exploitable Improper certificate validation vulnerability. Successful exploitation could lead to a security bypass |
| [CVE-2018-8412](https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8412) | [code](3rd-party/ms/CVE-2018-8412) | An elevation of privilege vulnerability exists when the Microsoft AutoUpdate (MAU) application for Mac improperly validates updates before executing them, aka "Microsoft (MAU) Office Elevation of Privilege Vulnerability." This affects Microsoft Office |
| [CVE-2019-8513](https://support.apple.com/en-us/HT209600) | [code](macOS/CVE-2019-8513-timemachine) | TimeMachine: A local user may be able to execute arbitrary shell commands |
| [CVE-2019-8530](https://support.apple.com/en-us/HT209599) | [code](macOS/CVE-2019-8565-fbahelperd) | XPC: A malicious application may be able to overwrite arbitrary files |
| [CVE-2019-8521](https://support.apple.com/en-in/HT209600) | [code](macOS/CVE-2019-8565-fbahelperd) | Feedback Assistant: A malicious application may be able to overwrite arbitrary files |
| [CVE-2019-8565](https://support.apple.com/en-in/HT209600) | [code](macOS/CVE-2019-8565-fbahelperd) | Feedback Assistant: A malicious application may be able to gain root privileges |
| [N/A] | [code](macOS/up-to-10.13.6-sbx) | Patched before report, No CVE assigned. Full Safari logic sandbox escape up to macOS 10.13.6 |
| [N/A] | [code](macOS/ModJack) [ModJack HITB 2019 talk](https://conference.hitb.org/hitbsecconf2019ams/materials/D2T2%20-%20ModJack%20-%20Hijacking%20the%20MacOS%20Kernel%20-%20Zhi%20Zhou.pdf) | Root to kernel privilege escalation on macOS 10.13.x. No CVE assigned. |
| [CVE-2020-9979](https://support.apple.com/en-us/HT211850) | [code](macOS/CVE-2020-9979-mobileasset) | Assets: An attacker may be able to misuse a trust relationship to download malicious content |

sploits

File Explorer

Today's picks

Was this content helpful?

Recent Feedback

sploits

File Explorer

Today's picks

Was this content helpful?

Recent Feedback

Download README