Apple Screen Sharing Pre-Auth RCE

warez.sl0p.foo

Apple Screen Sharing Pre-Auth RCE

warez.sl0p.foo

Resident PulserB to

Pulse of TruthEnglish · 1 month ago

Apple Screen Sharing Pre-Auth RCE (macOS ≤ 26.5)

warez.sl0p.foo

Pre-auth RCE in screensharingd — SRP frame-length validation returns success on oversized frames, bypassing authentication entirely. Root file read/write → code execution via crontab. No user interaction required.

Comments

You must log in or # to comment.

Chat

Pulse of Truth

pulse_of_truth

Create a post

You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !pulse_of_truth@infosec.pub

Cyber Security news and links to cyber security stories that could make you go hmmm. The content is exactly as it is consumed through RSS feeds and wont be edited (except for the occasional encoding errors).

This community is automagically fed by an instance of Dittybopper.

Commenting rules:

Be respectful.
No bigotry (including racism, sexism, homophobia, transphobia).
No pornography.
Nothing illegal.
More rules will be added when necessary

Visibility: Public

This community can be federated to other instances and be posted/commented in by their users.

59 users / day
488 users / week
1.17K users / month
3.32K users / 6 months
213 local subscribers
2.51K subscribers
6.4K Posts
4.74K Comments
Modlog

mods:
krogoth