macOS

Apple Screen Sharing Pre-Auth RCE

by

Author: warez.sl0p.foo (advisory autonomously generated and validated by AI coding agents) Published: 2026-08-01 (correction published 2026-08-02) Source: https://warez.sl0p.foo/apple-screensharing-rce/ Summary An advisory published on warez.sl0p.foo describes a pre-authentication flaw in the macOS Screen Sharing daemon (screensharingd) that, according to the authors, allows an unauthenticated network attacker to bypass Secure Remote Password (SRP) authentication and reach the … Read more

Cottou – dyld Rebase Opcode Out-of-Bounds Segment Index Leads to ACE

by

Author: impost0r Published: June 29, 2026 Source: https://ret2p.lt/2026/06/29/cottou.html Summary “Cottou” is a writeup by impost0r describing an out-of-bounds segment-index flaw in Apple’s dyld dynamic linker that can be turned into arbitrary code execution when a malicious dynamic library is loaded. The bug lies in how dyld processes rebase opcodes while binding a Mach-O image: a … Read more

Exploiting Reversing (ER) series: article 04 | macOS/iOS (part 01)

by

Exploiting Reversing (ER) series: article 04 | macOS/iOS (part 01) Author: Alexandre Borges Published: February 4, 2025 Source: https://exploitreversing.com/2025/02/04/exploiting-reversing-er-series-article-04/ Summary Security researcher Alexandre Borges has released the fourth installment of his Exploiting Reversing (ER) Series — a comprehensive, step-by-step research document series covering vulnerability research and exploit development across Windows, macOS, hypervisors, and browsers. Article … Read more