[ home ] [ contents ] [ platforms ] [ shellcode ] [ search ] [ cracker ] [ links ] [ rss ] [ archive ] [ R.I.P rgod ]
milw0rm
[ osX - remote ]
-::DATE -::DESCRIPTION -::HITS -::AUTHOR
2007-01-03 Apple Quicktime <= 7.1.3 (HREFTrack) Cross-Zone Scripting Exploit 4866 R D MoAB
2006-03-13 Apple Mac OS X 10.4.5 Mail.app (Real Name) Buffer Overflow Exploit 8210 R D Kevin Finisterre
2006-02-22 Mac OS X Safari Browser (Safe File) Remote Code Execution Exploit 8934 RM D H D Moore
2006-02-08 Mozilla Firefox 1.5 location.QueryInterface() Code Execution (osx) 10471 RM D H D Moore
2005-10-20 Veritas NetBackup <= 6.0 (bpjava-msvc) Remote Exploit (OS X) 5102 R D Kevin Finisterre
2005-01-16 Apple iTunes Playlist Local Parsing Buffer Overflow Exploit 4968 R D nemo
2004-08-13 Mac OS X <= 10.3.3 AppleFileServer Remote Root Overflow Exploit 5298 RM D Dino Dai Zovi
2003-09-11 4D WebSTAR FTP Server Suite Remote Buffer Overflow Exploit 4142 RM D B-r00t
2003-02-24 Darwin Streaming Server <= 4.1.2 (parse_xml.cgi) Code Execution Exploit 2983 R D FOX_MULDER

[ osX - local ]
-::DATE -::DESCRIPTION -::HITS -::AUTHOR
2007-12-19 Apple Mac OS X mount_smbfs Stack Based Buffer Overflow Exploit 6161 R D Subreption LLC.
2007-05-30 Mac OS X < 2007-005 (vpnd) Local Privilege Escalation Exploit 6037 R D Kevin Finisterre
2007-05-25 Mac OS X <= 10.4.8 pppd Plugin Loading Privilege Escalation Exploit 3804 R D qaaz
2007-03-19 PHP 5.2.0 header() Space Trimming Buffer Underflow Exploit (MacOSX) 4795 R D Stefan Esser
2007-03-12 PHP 5.2.0 ext/filter Space Trimming Buffer Underflow Exploit (MacOSX) 4397 R D Stefan Esser
2007-02-28 McAfee VirusScan for Mac (Virex) <= 7.7 Local Root Exploit 3359 R D Kevin Finisterre
2007-01-29 Mac OS X 10.4.8 (8L2127) crashdump Privilege Escalation Exploit 5166 R D MoAB
2007-01-23 Mac OS X 10.4.8 (UserNotificationCenter) Privilege Escalation Exploit 4017 R D MoAB
2007-01-21 Mac OS X 10.4.8 System Preferences Local Privilege Escalation Exploit 3790 R D MoAB
2007-01-19 Rumpus 5.1 Local Privilege Escalation / Remote FTP LIST PoC Exploit 3269 R D MoAB
2007-01-15 Mac OS X 10.4.8 Overwrite Setuid Binaries Privilege Escalation Exploit 4578 R D MoAB
2007-01-08 Application Enhancer (APE) 2.0.2 Local Privilege Escalation Exploit 3534 R D MoAB
2007-01-05 Mac OS X 10.4.8 DiskManagement BOM Local Privilege Escalation Exploit 3543 R D MoAB
2007-01-05 Mac OS X 10.4.8 DiskManagement BOM (cron) Privilege Escalation Exploit 3111 R D MoAB
2007-01-02 VLC Media Player 0.8.6 (udp://) Format String Exploit (x86) 4828 R D MoAB
2006-11-15 Kerio WebSTAR 5.4.2 (libucache.dylib) Privilege Escalation Exploit (OSX) 4138 R D Kevin Finisterre
2006-11-08 Xcode OpenBase <= 10.0.0 (symlink) Local Root Exploit (OSX) 5051 R D Kevin Finisterre
2006-11-08 Xcode OpenBase <= 10.0.0 (unsafe system call) Local Root Exploit (OSX) 3985 R D Kevin Finisterre
2006-10-16 Xcode OpenBase <= 9.1.5 (root file create) Local Root Exploit (OSX) 3311 R D Kevin Finisterre
2006-10-15 Xcode OpenBase <= 9.1.5 Local Root Exploit (OSX) 3534 R D Kevin Finisterre
2006-09-30 Mac OS X <= 10.4.7 Mach Exception Handling Local Root Exploit 5989 R D xmath
2006-09-30 Mac OS X <= 10.4.7 Mach Exception Handling Local Exploit (10.3.x 0day) 5182 R D Kevin Finisterre
2006-08-02 Mac OS X <= 10.3.8 (CF_CHARSET_PATH) Local BOF Exploit (2) 5278 R D Kevin Finisterre
2006-08-01 Mac OS X <= 10.4.7 fetchmail Privilege Escalation Exploit (x86) 4967 R D Kevin Finisterre
2006-08-01 Mac OS X <= 10.4.7 fetchmail Privilege Escalation Exploit (ppc) 4584 R D Kevin Finisterre
2006-08-01 Mac OS X <= 10.4.7 fetchmail Privilege Escalation Exploit 5315 R D Kevin Finisterre
2006-07-01 Mac OS X <= 10.4.6 (launchd) Local Format String Exploit (ppc) 4799 R D Kevin Finisterre
2006-06-28 Mac OS X <= 10.4.6 (launchd) Local Format String Exploit (x86) 5264 R D Kevin Finisterre
2006-03-01 Apple Mac OS X (/usr/bin/passwd) Custom Passwd Local Root Exploit 8052 R D vade79
2005-08-30 Adobe Version Cue 1.0/1.0.1 Local Root Exploit (OSX) 4766 R D vade79
2005-08-30 Adobe Version Cue 1.0/1.0.1 (-lib) Local Root Exploit (OSX) 4305 R D vade79
2005-06-14 Mac OS X 10.4 launchd Race Condition Exploit 5057 R D intropy
2005-03-22 Mac OS X <= 10.3.8 (CF_CHARSET_PATH) Local Root Buffer Overflow 5038 R D vade79
2005-02-07 Mac OS X DS_Store Arbitrary File Overwrite Exploit 4398 R D vade79
2005-02-07 Mac OS X Adobe Version Cue Local Root Exploit 4404 R D 0xdeadbabe
2005-01-22 Mac OS X <= 10.3.7 mRouter Local Privilege Escalation Exploit 4071 R D nemo
2004-12-08 Mac OS X Adobe Version Cue Local Root Exploit 4933 R D Jonathan Bringhurst
2004-07-28 Mac OS X Panther Internet Connect Local Root Exploit 4516 R D B-r00t
2003-04-18 Mac OS X <= 10.2.4 DirectoryService (PATH) Local Root Exploit 3919 R D Neeko Oni

[ osX - dos ]
-::DATE -::DESCRIPTION -::HITS -::AUTHOR
2008-02-18 Apple iPhoto 4.0.3 DPAP Server Denial of Service Exploit 2213 R D David Wharton
2007-12-12 Apple Mac OS X xnu <= 1228.0 Local kernel Denial of Service PoC 2507 R D mu-b
2007-12-04 Apple Mac OS X xnu <= 1228.0 Local Kernel Denial of Service PoC 2178 R D mu-b
2007-12-04 Apple Mac OS X 10.5.0 (leopard) vpnd Remote Denial of Service PoC 3715 R D mu-b
2007-11-16 Apple Mac OS X 10.4.x Kernel i386_set_ldt() Integer Overflow PoC 3435 R D RISE Security
2007-02-02 Chicken of the VNC 2.0 (NULL-pointer) Remote Denial of Service Exploit 4273 R D poplix
2007-01-30 Apple iChat Bonjour 3.1.6.441 Multiple Denial of Service Exploit 2928 R D MoAB
2007-01-25 Apple CFNetwork HTTP Response Denial of Service Exploit (rb code) 3423 R D MoAB
2007-01-21 Apple iChat 3.1.6 v441 aim:// URL Handler Format String Exploit PoC 3923 R D X MoAB
2007-01-21 Mac OS X 10.4.x Kernel shared_region_map_file_np() Memory Corruption 2427 R D Adriano Lima
2007-01-20 Transmit.app <= 3.5.5 ftps:// URL Handler Heap Buffer Overflow PoC 4481 R D X MoAB
2007-01-18 Mac OS X 10.4.8 SLP Daemon Service Registration Buffer Overflow PoC 4134 R D MoAB
2007-01-17 Colloquy <= 2.1.3545 (INVITE) Format String Denial of Service Exploit 3125 R D MoAB
2007-01-14 Mac OS X 10.4.8 AppleTalk ATPsndrsp() Heap Buffer Overflow PoC 3207 R D MoAB
2007-01-09 Mac OS X 10.4.8 Apple Finder DMG Volume Name Memory Corruption PoC 2993 R D MoAB
2007-01-07 OmniWeb 5.5.1 Javascript alert() Remote Format String PoC 3723 R D X MoAB
2007-01-04 iLife iPhoto Photocast (XML title) Remote Format String PoC 2688 R D MoAB
2007-01-02 VLC Media Player 0.8.6 (udp://) Format String Exploit PoC (ppc) 3181 R D MoAB
2006-04-24 Apple Mac OS X Safari <= 2.0.3 (417.9.2) Multiple Vulnerabilities PoC 5683 R D X Tom Ferris
2006-04-24 Apple Mac OS X Safari <= 2.0.3 (417.9.2) (ROWSPAN) DoS PoC 5583 R D X Yannick von Arx
2005-02-08 Mac OS X AppleFileServer Remote Denial of Service Exploit 4072 R D nemo
2005-01-20 Mac OS X <= 10.3.7 Input Validation Flaw parse_machfile() DoS 4130 R D nemo



send all submissions to submit[at]milw0rm.com [gpg]

Copyright © 2004-2008 milw0rm