exploit-db-mirror/exploits/macos/local
Offensive Security c35d9b35f7 DB: 2017-12-09
14 changes to exploits/shellcodes

macOS < 10.12.2 / iOS < 10.2 Kernel - ipc_port_t Reference Count Leak Due to Incorrect externalMethod Overrides Use-After-Free
macOS 10.12.1 / iOS < 10.2 - powerd Arbitrary Port Replacement
macOS 10.12.1 / iOS < 10.2 - syslogd Arbitrary Port Replacement
Apple macOS < 10.12.2 / iOS < 10.2 Kernel - ipc_port_t Reference Count Leak Due to Incorrect externalMethod Overrides Use-After-Free
Apple macOS 10.12.1 / iOS < 10.2 - powerd Arbitrary Port Replacement
Apple macOS 10.12.1 / iOS < 10.2 - syslogd Arbitrary Port Replacement
macOS 10.12.1 / iOS 10.2 - Kernel Userspace Pointer Memory Corruption
macOS 10.12.1 / iOS Kernel - 'IOService::matchPassive' Use-After-Free
macOS 10.12.1 / iOS Kernel - 'host_self_trap' Use-After-Free
Apple macOS 10.12.1 / iOS 10.2 - Kernel Userspace Pointer Memory Corruption
Apple macOS 10.12.1 / iOS Kernel - 'IOService::matchPassive' Use-After-Free
Apple macOS 10.12.1 / iOS Kernel - 'host_self_trap' Use-After-Free
Wireshark 2.4.0 - 2.4.2 / 2.2.0 - 2.2.10 - CIP Safety Dissector Crash
Linux Kernel - DCCP Socket Use-After-Free
Wireshark 2.4.0 < 2.4.2 / 2.2.0 < 2.2.10 - CIP Safety Dissector Crash
Linux Kernel 4.10.5 / < 4.14.3 (Ubuntu) - DCCP Socket Use-After-Free

iOS 10.1.1 / macOS 10.12 16A323 XNU Kernel - set_dp_control_port Lack of Locking Use-After-Free
Apple iOS 10.1.1 / macOS 10.12 16A323 XNU Kernel - set_dp_control_port Lack of Locking Use-After-Free

macOS < 10.12.2 / iOS < 10.2 - Broken Kernel Mach Port Name uref Handling Privileged Port Name Replacement Privilege Escalation
Apple macOS < 10.12.2 / iOS < 10.2 - Broken Kernel Mach Port Name uref Handling Privileged Port Name Replacement Privilege Escalation

iOS/macOS - xpc_data Objects Sandbox Escape Privelege Escalation
Apple iOS/macOS - 'xpc_data' Objects Sandbox Escape Privilege Escalation

macOS High Sierra - Local Privilege Escalation (Metasploit)
Apple macOS 10.13.1 (High Sierra) - 'Blank Root' Local Privilege Escalation (Metasploit)
Apple macOS 10.13.1 (High Sierra) - Insecure Cron System Local Privilege Escalation
Apple macOS 10.13.1 (High Sierra) - 'Blank Root' Local Privilege Escalation

LabF nfsAxe FTP Client 3.7 - Buffer Overflow (DEP Bypass)
DomainSale PHP Script 1.0 - 'id' SQL Injection
Simple Chatting System 1.0.0 - Arbitrary File Upload
Website Auction Marketplace 2.0.5 - 'cat_id' SQL Injection
Realestate Crowdfunding Script 2.7.2 - 'pid' SQL Injection
FS Thumbtack Clone 1.0 - 'cat' / 'sc' SQL Injection
FS Stackoverflow Clone 1.0 - 'keywords' SQL Injection
FS Shutterstock Clone 1.0 - 'keywords' SQL Injection
FS Quibids Clone 1.0 - SQL Injection
FS Olx Clone 1.0 - 'scat' / 'pid' SQL Injection
FS Monster Clone 1.0 - 'Employer_Details.php?id' SQL Injection
2017-12-09 05:02:21 +00:00
..
40669.txt DB: 2017-11-24 2017-11-24 20:56:23 +00:00
40956.c DB: 2017-11-24 2017-11-24 20:56:23 +00:00
40957.c DB: 2017-11-24 2017-11-24 20:56:23 +00:00
41853.txt DB: 2017-11-24 2017-11-24 20:56:23 +00:00
41854.txt DB: 2017-11-24 2017-11-24 20:56:23 +00:00
41952.txt DB: 2017-11-24 2017-11-24 20:56:23 +00:00
42146.sh DB: 2017-11-24 2017-11-24 20:56:23 +00:00
42334.txt DB: 2017-11-24 2017-11-24 20:56:23 +00:00
42454.txt DB: 2017-11-24 2017-11-24 20:56:23 +00:00
43201.rb DB: 2017-12-01 2017-12-01 10:57:46 +00:00
43216.rb DB: 2017-12-07 2017-12-07 05:02:26 +00:00
43217.sh DB: 2017-12-07 2017-12-07 05:02:26 +00:00
43218.sh DB: 2017-12-07 2017-12-07 05:02:26 +00:00
43219.sh DB: 2017-12-07 2017-12-07 05:02:26 +00:00
43220.sh DB: 2017-12-07 2017-12-07 05:02:26 +00:00
43221.sh DB: 2017-12-07 2017-12-07 05:02:26 +00:00
43222.sh DB: 2017-12-07 2017-12-07 05:02:26 +00:00
43223.sh DB: 2017-12-07 2017-12-07 05:02:26 +00:00
43224.sh DB: 2017-12-07 2017-12-07 05:02:26 +00:00
43225.sh DB: 2017-12-07 2017-12-07 05:02:26 +00:00
43247.md DB: 2017-12-09 2017-12-09 05:02:21 +00:00
43248.md DB: 2017-12-09 2017-12-09 05:02:21 +00:00