Pinned Loading

1. Glass-Cage-iOS18-CVE-2025-24085-CVE-2025-24201 Glass-Cage-iOS18-CVE-2025-24085-CVE-2025-24201 Public

   Glass Cage is a zero-click PNG-based RCE chain in iOS 18.2.1, exploiting WebKit (CVE-2025-24201) and Core Media (CVE-2025-24085) to achieve sandbox escape, kernel-level access, and device bricking.…

   15 5

2. iOS-Attack-Chain-CVE-2025-31200-CVE-2025-31201 iOS-Attack-Chain-CVE-2025-31200-CVE-2025-31201 Public

   CVE-2025-31200 is a zero-day, zero-click RCE in iOS CoreAudio’s AudioConverterService, triggered by a malicious audio file via iMessage/SMS. Exploitation bypassed Blastdoor, enabled kernel escalati…

   57 9

3. iOS-18.5-Bluetooth-Privacy-Vuln iOS-18.5-Bluetooth-Privacy-Vuln Public

   Discovery of a critical Bluetooth and GPS privacy vulnerability in iOS 18.5 enabling silent BLE scans, covert GPS activation, and trust metadata exposure without user consent. Native Apple daemons …

   27 4

4. iOS18.6.2-Persistent-Automation-Exploit-in-Siri-Shortcuts-and-Apple-SWC iOS18.6.2-Persistent-Automation-Exploit-in-Siri-Shortcuts-and-Apple-SWC Public

   This repo documents a vulnerability in Siri Shortcuts and Shared Web Credentials (SWC) allowing malformed payloads to persistently execute, trigger retry storms, bypass TLS validation, and request …

   10 3

5. Apple-Silicon-A17-Flaw Apple-Silicon-A17-Flaw Public

   The Secure Enclave and digitizer controller share I2C4. Electrical faults on this bus halt SPU init and break input. A silicon-level flaw with no redundancy or recovery.

   11 3

6. A16-FuseBypass A16-FuseBypass Public

   This repository discloses a critical vulnerability in Apple’s A16 Bionic chip, where debug logic is executed on production-fused devices (dev-fused=0, debug=0x0). Logs show SecureROM and co-process…

   12 3