Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

CVE-2022-46689 PoC — Apple iOS 和 macOS 竞争条件问题漏洞

Source
Associated Vulnerability
Title:Apple iOS 和 macOS 竞争条件问题漏洞 (CVE-2022-46689)
Description:A race condition was addressed with additional validation. This issue is fixed in tvOS 16.2, macOS Monterey 12.6.2, macOS Ventura 13.1, macOS Big Sur 11.7.2, iOS 15.7.2 and iPadOS 15.7.2, iOS 16.2 and iPadOS 16.2, watchOS 9.2. An app may be able to execute arbitrary code with kernel privileges.
Description
Proof-of-concept app to overwrite fonts on iOS using CVE-2022-46689.
Readme
# Control Tower Notification Enabler

This cdk package installs a Lambda function, with an associated IAM role, and subscribes the Lambda
function to Control Tower aggregate security notifications. In the event of a Control Tower rule violation
(e.g. publicly accessible S3 bucket), the Lambda sends a notification to a web hook.

## Prerequisites
 - Admin access to the organization. This is used to assume the control tower role in the audit account
 - [AWS CDK](https://docs.aws.amazon.com/cdk/latest/guide/getting_started.html) installed
 - Version 2 of the [AWS Cli](https://docs.aws.amazon.com/cli/latest/userguide/install-cliv2.html)

## MacOS / Linux
To enable the notifications on a mac or linux, run the `install.sh` script as an administrative user.
The script takes 3 parameters
1. The aws account account number
1. The webhook URL the notifications will be posted too
1. Optional name of Gaurdrail configRuleName(s) you want notification for. Separate multiple rules with comma. Use ALL_RULES for notifciation of all Guardrails 

sample command line:

    . install.sh 123456789012 https://mywebhookURL ALL_RULES

## Windows
To enable the notifications on a windows machine, from `install.ps1` from a powershell window.
The script takes 3 parameters
1. The aws account account number
1. The webhook URL the notifications will be posted too
1. Optional name of Gaurdrail configRuleName(s) you want notification for. Separate multiple rules with comma. Use ALL_RULES for notifciation of all Guardrails 

Sample command line:

    .\install.ps1 -AWSAduitAccountNumber '123456789012' -WebHookURL 'https://mywebhookURL.com/' -RuleFilter ALL_RULES
File Snapshot

Log in to view the POC file snapshot cached by Shenlong Bot

Log in to view
Remarks
    1. It is advised to access via the original source first.
    2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.
    3. Mirroring, verifying, and maintaining this POC archive takes ongoing effort, so local snapshots are a paid feature. Your subscription keeps the archive online — thank you for the support. View subscription plans →