writeups.xyz writeups.xyz / Signature Validation Bypass

Title Vulnerabilities Programs Authors
The Nightmare of Apple's OTA Update: Bypassing the Signature Verification and Pwning the Kernel
Exploiting Improper Validation of Amazon Simple Notification Service SigningCertUrl
Get root on macOS 12.3.1: proof-of-concepts for Linus Henze's CoreTrust and DriverKit bugs (CVE-2022-26766, CVE-2022-26763)
Discourse SNS webhook RCE